CVE-2024-9554

Summary

CVE-2024-9554 is a newly identified vulnerability affecting Sovell Smart Canteen System versions up to 3.0.7303.30513. Specifically, the Check_ET_CheckPwdz201 function in the suanfa.py file of the Password Reset Handler component contains a manipulation issue that enables authorization bypass. This issue permits remote attackers to gain unauthorized access to the system, though the attack's complexity is relatively high and exploitation is reportedly difficult. The vendor was notified about this disclosure but did not respond, leaving affected users at risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.