What is CVE-2024-7746?

CVE-2024-7746 is a critical-severity vulnerability in Traccar Server, classified under CWE-1392. CVSS score: 9.8/10. Published 2024-08-13.

How severe is CVE-2024-7746?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Is CVE-2024-7746 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Auth bypass in Traccar Server

CVE-2024-7746

Use of Default Credentials vulnerability in Tananaev Solutions Traccar Server on Administrator Panel modules allows Authentication Abuse.This issue affects the privileged transactions implemented by the Traccar solution that should otherwi…

EPSS: 0.005 (40.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Traccar Server — versions 2.12
Traccar

Weakness classification (CWE)

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

cve@asrg.io (Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2024-7746?: CVE-2024-7746 is a critical-severity vulnerability in Traccar Server, classified under CWE-1392. CVSS score: 9.8/10. Published 2024-08-13.
How severe is CVE-2024-7746?: Critical severity. CVSS v3 base score is 9.8 out of 10.
Is CVE-2024-7746 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.