CVE-2024-45370
High · 7.3CVSS
7.3
EPSS
0.2%
Published
Dec 1, 2025
CISA due date
—
The record
An authentication bypass vulnerability exists in the User profile management functionality of Socomec Easy Config System 2.6.1.0. A specially crafted database record can lead to unauthorized access. An attacker can modify a local database to trigger this vulnerability.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-77508 Weblate is a web based localization tool. CWE-302
- CVE-2026-5423 @neo4j/graphql library versions prior to 7.5.6 fail to verify the authenticity of a… CWE-302
- CVE-2026-50528 Incorrect authorization in .NET allows an unauthorized attacker to bypass a security… CWE-302
- CVE-2026-47303 Authentication bypass by assumed-immutable data in ASP.NET Core allows an authorized… CWE-302
- CVE-2026-34460 NamelessMC is website software for Minecraft servers. CWE-302
- CVE-2025-43992 Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0… CWE-302
- CVE-2026-28510 eLabFTW is an open source electronic lab notebook. CWE-302
- CVE-2026-40285 WeGIA is a web manager for charitable institutions. CWE-302