CyberSecBulletin

Syscomgo vulnerabilities

We track 2 vulnerabilities in Syscomgo products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 16, 2024.

2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score

Latest Syscomgo vulnerabilities

  • 8.8 High severity

    OMFLOW: Improper Access Control

    CVE-2024-8779The SYSCOM Group

    OMFLOW from The SYSCOM Group does not properly restrict access to the system settings modification functionality, allowing remote attackers with regular privileges to update system settings or create accounts with administrator privileges, thereby gaining cont

  • 7.5 High severity

    OMFLOW: Insufficiently Protected Credentials

    CVE-2024-8777The SYSCOM Group

    OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations. If LDAP authentication is enabled, attackers can obtain plaintext credentials.