CVE-2024-57490 — HIGH (7.7)

Vulnerability Description

Guangzhou Hongfan Technology Co., LTD. iOffice20 has any user login vulnerability. An attacker can log in to any system account including the system administrator through a logical flaw.

CVSS Score

7.7

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

LOW

Affected Products

Vendor	Product	Versions
Ioffice	Ioffice20	-

Related Weaknesses (CWE)

CWE-287

References

https://gist.github.com/NaliangzzZ/44bfcc1d9c2cf275d2b6683ca9e20980Third Party Advisory
https://www.ioffice.cnProduct

FAQ

What is CVE-2024-57490?

CVE-2024-57490 is a vulnerability with a CVSS score of 7.7 (HIGH). Guangzhou Hongfan Technology Co., LTD. iOffice20 has any user login vulnerability. An attacker can log in to any system account including the system administrator through a logical flaw.

How severe is CVE-2024-57490?

CVE-2024-57490 has been rated HIGH with a CVSS base score of 7.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2024-57490?

Check the references section above for vendor advisories and patch information. Affected products include: Ioffice Ioffice20.