What is CVE-2024-37774?

CVE-2024-37774 is a high-severity vulnerability in Sunbirddcim Dctrack, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.0/10. Published 2024-12-16.

How severe is CVE-2024-37774?

High severity. CVSS v3 base score is 8.0 out of 10.

CSRF in Sunbirddcim Dctrack

CVE-2024-37774

A Cross-Site Request Forgery (CSRF) in Sunbird DCIM dcTrack v9.1.2 allows authenticated attackers to escalate their privileges by forcing an Administrator user to perform sensitive requests in some admin screens.

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.002 (9.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H.

Affected products

Sunbirddcim Dctrack — versions 9.1.2
N/a — versions n/a

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

cve@mitre.org (Product)
cve@mitre.org (Release Notes)

Frequently asked questions

What is CVE-2024-37774?: CVE-2024-37774 is a high-severity vulnerability in Sunbirddcim Dctrack, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.0/10. Published 2024-12-16.
How severe is CVE-2024-37774?: High severity. CVSS v3 base score is 8.0 out of 10.