What is CVE-2024-45370?

CVE-2024-45370 is a high-severity vulnerability in Socomec Easy Config System, classified under Authentication Bypass by Assumed-Immutable Data. CVSS score: 7.3/10. Published 2025-12-01.

How severe is CVE-2024-45370?

High severity. CVSS v3 base score is 7.3 out of 10.

Vulnerability in Socomec Easy Config System

CVE-2024-45370

An authentication bypass vulnerability exists in the User profile management functionality of Socomec Easy Config System 2.6.1.0. A specially crafted database record can lead to unauthorized access. An attacker can modify a local database…

EPSS: 0.000 (8.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N.

Affected products

Socomec Easy Config System — versions 2.6.1.0

Weakness classification (CWE)

CWE-302 — Authentication Bypass by Assumed-Immutable Data

References

https://talosintelligence.com/vulnerability_reports/TALOS-2024-2117
https://www.socomec.fr/sites/default/files/2025-11/CVE-2024-45370---ECS-2610---CVSS31_VULNERABILITIES_2025-11-19-09-45-29_English_PLURI_3.pdf

Frequently asked questions

What is CVE-2024-45370?: CVE-2024-45370 is a high-severity vulnerability in Socomec Easy Config System, classified under Authentication Bypass by Assumed-Immutable Data. CVSS score: 7.3/10. Published 2025-12-01.
How severe is CVE-2024-45370?: High severity. CVSS v3 base score is 7.3 out of 10.