CVE-2024-0712

A vulnerability was found in Byzoro Smart S150 Management Platform V31R02B15. It has been classified as critical. Affected is an unknown function of the file /useratte/inc/userattea.php. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-251538 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-284

• https://github.com/GTA12138/vul/blob/main/smart%20s150/2024-1-9%20smart%20s150%20101508.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.251538Permissions Required, Third Party Advisory
• https://vuldb.com/?id.251538Third Party Advisory
• https://vuldb.com/?submit.264497
• https://github.com/GTA12138/vul/blob/main/smart%20s150/2024-1-9%20smart%20s150%20101508.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.251538Permissions Required, Third Party Advisory
• https://vuldb.com/?id.251538Third Party Advisory
• https://vuldb.com/?submit.264497

Published

Jan 19, 2024

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-0706Rejected reason: ***REJECT*** This was a false positive repo…
• CVE-2024-0707Rejected reason: **REJECT** Not a valid vulnerability.
• CVE-2024-0708The Landing Page Cat – Coming Soon Page, Maintenance Page & …5.3
• CVE-2024-0709The Cryptocurrency Widgets – Price Ticker & Coins List plugi…7.5
• CVE-2024-0710The GP Unique ID plugin for WordPress is vulnerable to Uniqu…5.3
• CVE-2024-0711The Buttons Shortcode and Widget WordPress plugin through 1.…6.1
• CVE-2024-0713Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMB…
• CVE-2024-0714A vulnerability was found in MiczFlor RPi-Jukebox-RFID up to…9.8
• CVE-2024-0715Expression Language Injection vulnerability in Hitachi Globa…9.8
• CVE-2024-0716A vulnerability classified as problematic has been found in …5.3
• CVE-2024-0717A vulnerability classified as critical was found in D-Link D…5.3
• CVE-2024-0718A vulnerability, which was classified as problematic, has be…4.8