CVE-2024-12902

Global Wisdom Software ANCHOR - Undocumented Privileged Account

State: Published
Severity: 8.4 High
Published: Dec 23, 2024
Updated: Dec 24, 2024
Reserved: Dec 23, 2024

Description

ANCHOR from Global Wisdom Software is an integrated product running on a Windows virtual machine. The underlying Windows OS of the product contains high-privilege service accounts. If these accounts use default passwords, attackers could remotely log in to the virtual machine using the default credentials.

Scores

CVSS	Score	Vector	Source
3.1	8.4 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	twcert

Weaknesses

CWE-1392 Use of Default Credentials

Affected Products

Product	Versions
ANCHORGlobal Wisdom Software	2.5.* to before 2.5.9.5Affected 2.7.* to before 2.7.2.4Affected

References

https://www.twcert.org.tw/tw/cp-132-8314-983c9-1.htmlthird-party-advisory
https://www.twcert.org.tw/en/cp-139-8315-e6069-2.htmlthird-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.