VULNERABILITY INTELLIGENCE

CVE-2024-8777

CVSS score7.5 HIGH
EPSS probability0.54%
CISA KEVNot currently listed
Published2024-09-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can obtain plaintext credentials.

Weakness classification

  • twcert@cert.org.tw: CWE-200
  • nvd@nist.gov: CWE-522

Primary references