CVE-2024-57490

Summary

CVE-2024-57490 is a newly disclosed vulnerability affecting Guangzhou Hongfan Technology Co., LTD's iOffice20 software. This issue grants attackers the ability to log in to any system account, including the system administrator, by exploiting a logical flaw in the user authentication process. Successful exploitation allows unauthorized access to sensitive information and system controls. The impact of this vulnerability is significant, as it allows attackers to gain administrative privileges and potentially disrupt or compromise the affected system. Organizations using iOffice20 are encouraged to apply the forthcoming patch or update to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.