CVE-2024-7461

Summary

CVE-2024-7461 is a critical vulnerability affecting ForIP Tecnologia's Administração PABX 1.x. The issue lies in an unknown functionality of the file /authMonitCallcenter within the monitcallcenter component. An attacker can manipulate the user argument to execute SQL injection attacks, which may be launched remotely. Though the vulnerability has been disclosed to the public, the vendor has yet to respond or provide a patch. VDB-273554 is the assigned identifier for this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.