CVE-2024-49501

MEDIUM

Incorrect Authorization (CWE-863)

2024-11-01 vultures@jpcert.or.jp

Authentication Bypass

5.7

CVSS 3.0 · Vendor: jpcert

Severity by source

Vendor (jpcert) PRIMARY

5.7 MEDIUM

AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Primary rating from Vendor (jpcert) · only source for this CVE.

CVSS VectorVendor: jpcert

CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

CVE Published

Nov 01, 2024 - 05:15 cve.org

MEDIUM 5.7

DescriptionCVE.org

Sysmac Studio provided by OMRON Corporation contains an incorrect authorization vulnerability. If this vulnerability is exploited, an attacker may access the program which is protected by Data Protection function.

AnalysisAI

Sysmac Studio provided by OMRON Corporation contains an incorrect authorization vulnerability. Rated medium severity (CVSS 5.7), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Incorrect Authorization (CWE-863), which allows attackers to bypass authorization checks to access restricted resources. Sysmac Studio provided by OMRON Corporation contains an incorrect authorization vulnerability. If this vulnerability is exploited, an attacker may access the program which is protected by Data Protection function.

Affected ProductsAI

See vendor advisory for affected versions.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Review and test authorization logic, implement consistent access control checks, use centralized authorization framework.