CVE-2024-8778
The SYSCOM Group OMFLOW - Arbitrary File Read
- State
- Published
- Severity
- 6.5 Medium
- Published
- Sep 16, 2024
- Updated
- Sep 16, 2024
- Reserved
- Sep 13, 2024
Description
OMFLOW from The SYSCOM Group does not properly validate user input of the download functionality, allowing remote attackers with regular privileges to read arbitrary system files.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.5 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | twcert |
Weaknesses
- CWE-36 Absolute Path Traversal
Affected Products
| Product | Versions |
|---|---|
OMFLOWThe SYSCOM Group |
|
References
- https://www.twcert.org.tw/tw/cp-132-8073-ff771-1.htmlthird-party-advisory
- https://www.twcert.org.tw/en/cp-139-8074-66457-2.htmlthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.