CVE-2024-7898

A vulnerability classified as critical was found in Tosei Online Store Management System  4.02/4.03/4.04. This vulnerability affects unknown code of the component Backend. The manipulation leads to use of default credentials. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.3 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
VulDBCNA
7.3 HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 41%
VendorProductVersion
tosei-corporationonline_store_management_system
4.0.2
tosei-corporationonline_store_management_system
4.0.3
tosei-corporationonline_store_management_system
4.0.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://gist.github.com/b0rgch3n/3136cad95b09e42184fb2d78aae33651
https://vuldb.com/?ctiid.274906
https://vuldb.com/?id.274906
https://vuldb.com/?submit.386560