Vulnerabilities > Syscomgo > High

DATE CVE VULNERABILITY TITLE RISK
2024-09-16 CVE-2024-8777 Insufficiently Protected Credentials vulnerability in Syscomgo Omflow
OMFLOW from The SYSCOM Group has an information leakage vulnerability, allowing unauthorized remote attackers to read arbitrary system configurations.
network
low complexity
syscomgo CWE-522
7.5
2024-09-16 CVE-2024-8779 Unspecified vulnerability in Syscomgo Omflow
OMFLOW from The SYSCOM Group does not properly restrict access to the system settings modification functionality, allowing remote attackers with regular privileges to update system settings or create accounts with administrator privileges, thereby gaining control of the server.
network
low complexity
syscomgo
8.8