CVE-2024-1344
CVSS 3.1 Score 6.8 of 10 (medium)
Details
Summary
CVE-2024-1344 is a vulnerability that affects version 19.10 of LaborOfficeFree. The vulnerability allows an attacker to read and extract the encrypted database credentials from the 'LOF_service.exe' and 'LaborOfficeFree.exe' files located in the '%programfiles(x86)%\LaborOfficeFree\' directory. This can be done remotely, granting the attacker root-like privileges. The risk score for this vulnerability is 26, indicating a medium severity level. The confidentiality impact is high, while the integrity impact is low. Remediation measures should be taken to address this vulnerability and prevent unauthorized access to sensitive information stored in LaborOfficeFree.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions