CVEvulnerability

CVE-2024-41199

7.2 HIGH Published 2025-05-22 Modified 2026-06-17 Official page ↗

Status: Analyzed
Published: 2025-05-22
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0): 7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-269, CWE-287

Description

An issue in Ocuco Innovation - JOBMANAGER.EXE v2.10.24.16 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet.

Affected configurations

• ocuco innovation 2.10.24.16

Weakness · CWE (2)

CWE-269 Improper Privilege Management weakness
CWE-287 Improper Authentication weakness

References

https://drive.google.com/file/d/1dVvH9l0gKRK0OPcF6_8yTLPsARKFqWqB/view?usp=drive_link Permissions Required
https://gist.githubusercontent.com/john0x186/1d9cc7fcc8386480d2bdaa9fdcfa914b/raw/d2d3d74ccaa939127ee2b03139061509a7dd238c/full-disclosure.md Exploit

CVE-2024-41199

Description

Affected configurations

Related

Weakness · CWE (2)

References