CVE-2024-12902

ANCHOR from Global Wisdom Software is an integrated product running on a Windows virtual machine. The underlying Windows OS of the product contains high-privilege service accounts. If these accounts use default passwords, attackers could remotely log in to the virtual machine using the default credentials.

• CWE-1392

• https://www.twcert.org.tw/en/cp-139-8315-e6069-2.html
• https://www.twcert.org.tw/tw/cp-132-8314-983c9-1.html

Published

Dec 23, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-12897A vulnerability was found in Intelbras VIP S3020 G2, VIP S40…5.3
• CVE-2024-12898A vulnerability was found in 1000 Projects Attendance Tracki…9.8
• CVE-2024-12899A vulnerability was found in 1000 Projects Attendance Tracki…9.8
• CVE-2024-1290The User Registration WordPress plugin before 2.12 does not …6.5
• CVE-2024-12900A vulnerability classified as critical has been found in Fox…9.8
• CVE-2024-12901A vulnerability classified as critical was found in FoxCMS u…6.9
• CVE-2024-12903Incorrect default permissions vulnerability in Evoko Home, a…7.8
• CVE-2024-12904Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2024-12905An Improper Link Resolution Before File Access ("Link Follow…7.5
• CVE-2024-12907Kentico CMS in version 7 is vulnerable to a Reflected XSS at…5.3
• CVE-2024-12908Delinea addressed a reported case on Secret Server v11.7.31 …8.3
• CVE-2024-12909A vulnerability in the FinanceChatLlamaPack of the run-llama…9.8