CVE-2024-45370

State: Published
Severity: 7.3 High
Published: Dec 1, 2025
Updated: Dec 1, 2025
Reserved: Nov 27, 2024

Description

An authentication bypass vulnerability exists in the User profile management functionality of Socomec Easy Config System 2.6.1.0. A specially crafted database record can lead to unauthorized access. An attacker can modify a local database to trigger this vulnerability.

Scores

CVSS	Score	Vector	Source
3.1	7.3 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N	talos

Weaknesses

CWE-302 Authentication Bypass by Assumed-Immutable Data

Affected Products

Product	Versions
Easy Config SystemSocomec	2.6.1.0Affected

References

https://talosintelligence.com/vulnerability_reports/TALOS-2024-2117
https://www.socomec.fr/sites/default/files/2025-11/CVE-2024-45370---ECS-2610---CVSS31_VULNERABILITIES_2025-11-19-09-45-29_English_PLURI_3.pdf
https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-2117

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.