CVE-2024-57395

CVE-2024-57395 is a password vulnerability in the Safety production process management system version 1.0. The issue, tied to CWE-522 (Insufficiently Protected Credentials), enables a remote attacker to escalate privileges, execute arbitrary code, and obtain sensitive information by exploiting the password and account number parameters. Published on 2025-01-29, it carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), marking it as critical due to its high impact on confidentiality, integrity, and availability.

A remote attacker requires only network access to exploit this vulnerability, with no privileges, user interaction, or special conditions needed owing to its low complexity. Exploitation allows full privilege escalation, remote code execution, and unauthorized access to sensitive data via manipulation of the specified parameters.

Advisories and additional details are available at http://www.hzzcka.com/ and https://github.com/qtxz54/Vul/blob/main/WeakPasswd/Safety-production-process-management-system.md.