Ocuco Innovation vulnerabilities

CVE-2024-41197 [CRITICAL] CWE-287 CVE-2024-41197: An issue in Ocuco Innovation - INVCLIENT.EXE v2.10.24.5 allows attackers to bypass authentication an An issue in Ocuco Innovation - INVCLIENT.EXE v2.10.24.5 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet.

CVE-2024-41196 [CRITICAL] CWE-287 CVE-2024-41196: An issue in Ocuco Innovation - REPORTSERVER.EXE v2.10.24.13 allows attackers to bypass authenticatio An issue in Ocuco Innovation - REPORTSERVER.EXE v2.10.24.13 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet.

CVE-2024-41198 [CRITICAL] CWE-287 CVE-2024-41198: An issue in Ocuco Innovation - REPORTS.EXE v2.10.24.13 allows attackers to bypass authentication and An issue in Ocuco Innovation - REPORTS.EXE v2.10.24.13 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet.

CVE-2024-41195 [CRITICAL] CWE-287 CVE-2024-41195: An issue in Ocuco Innovation - INNOVASERVICEINTF.EXE v2.10.24.17 allows attackers to bypass authenti An issue in Ocuco Innovation - INNOVASERVICEINTF.EXE v2.10.24.17 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet.

CVE-2024-41199 [HIGH] CWE-269 CVE-2024-41199: An issue in Ocuco Innovation - JOBMANAGER.EXE v2.10.24.16 allows attackers to bypass authentication An issue in Ocuco Innovation - JOBMANAGER.EXE v2.10.24.16 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet.

CVE-2024-40459 [HIGH] CWE-269 CVE-2024-40459: An issue in Ocuco Innovation APPMANAGER.EXE v.2.10.24.51 allows a local attacker to escalate privile An issue in Ocuco Innovation APPMANAGER.EXE v.2.10.24.51 allows a local attacker to escalate privileges via the application manager function

CVE-2024-40462 [HIGH] CWE-269 CVE-2024-40462: An issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the SET An issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the SETTINGSVATIGATOR.EXE component

CVE-2024-40460 [HIGH] CWE-269 CVE-2024-40460: An issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the JOB An issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the JOBENTRY.EXE

CVE-2024-40461 [HIGH] CWE-269 CVE-2024-40461: An issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the STO An issue in Ocuco Innovation v.2.10.24.51 allows a local attacker to escalate privileges via the STOCKORDERENTRY.EXE component

CVE-2024-40458 [HIGH] CWE-20 CVE-2024-40458: An issue in Ocuco Innovation Tracking.exe v.2.10.24.51 allows a local attacker to escalate privilege An issue in Ocuco Innovation Tracking.exe v.2.10.24.51 allows a local attacker to escalate privileges via the modification of TCP packets.