CVE-2024-7898

EUVD-2024-48739
A vulnerability classified as critical was found in Tosei Online Store Management System ネット店舗管理システム 4.02/4.03/4.04. This vulnerability affects unknown code of the component Backend. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.3 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
VulDBCNA
7.3 HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: 50%
Affected Products (NVD)
VendorProductVersion
tosei-corporationonline_store_management_system
4.0.2
tosei-corporationonline_store_management_system
4.0.3
tosei-corporationonline_store_management_system
4.0.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://gist.github.com/b0rgch3n/3136cad95b09e42184fb2d78aae33651
https://vuldb.com/?ctiid.274906
https://vuldb.com/?id.274906
https://vuldb.com/?submit.386560