CVE-2024-41196

概要

参考情報

• cwe.mitre.org/data/definitions/285.html · Technical Description
• drive.google.com/file/d/1UqJAQiwhHZCHtgac4-YiJHElBYhqUu3M/view · Permissions Required
• gist.githubusercontent.com/john0x186/1d9cc7fcc8386480d2bdaa9fdcfa914b/raw/d2d3d74ccaa939127ee2b03139061509a7dd238c/full-disclosure.md · Exploit

innovation のその他の脆弱性

• CVE-2024-41199高 7.2An issue in Ocuco Innovation - JOBMANAGER.EXE v2.10.24.16 allows attackers to bypass authentication and escalate privileges to Administrator…
• CVE-2024-41198緊急 9.8An issue in Ocuco Innovation - REPORTS.EXE v2.10.24.13 allows attackers to bypass authentication and escalate privileges to Administrator vi…
• CVE-2024-41197緊急 9.8An issue in Ocuco Innovation - INVCLIENT.EXE v2.10.24.5 allows attackers to bypass authentication and escalate privileges to Administrator v…
• CVE-2024-41195緊急 9.8An issue in Ocuco Innovation - INNOVASERVICEINTF.EXE v2.10.24.17 allows attackers to bypass authentication and escalate privileges to Admini…
• CVE-2024-40462高 7.8An issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the SETTINGSVATIGATOR.EXE component