CVE-2024-7732

Summary

CVE-2024-7732 is a newly disclosed vulnerability affecting the Dr.ID Access Control System from SECOM. The issue arises due to insufficient validation of a specific page parameter. An attacker, who is not authenticated, can exploit this vulnerability to inject SQL commands, granting unauthorized access to read, modify, and delete database contents. This poses a significant risk to the confidentiality and integrity of data managed through the affected system. Organizations using Dr.ID Access Control System are urged to apply the forthcoming patch to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.