CVE-2024-3263

YMS VIS Pro is an information system for veterinary and food administration, veterinarians and farm. Due to a combination of improper method for system credentials generation and weak password policy, passwords can be easily guessed and enumerated through brute force attacks. Successful attacks can lead to unauthorised access and execution of operations based on assigned user permissions. This vulnerability affects VIS Pro in versions <= 3.3.0.6. This vulnerability has been mitigated by changes in authentication mechanisms and implementation of additional authentication layer and strong password policies.

• CWE-287
• CWE-521

• https://remediata.com/blog/cve-2024-3263-improper-authentication-in-yms-vis-pro/
• https://www.svps.sk/vis/
• https://remediata.com/blog/cve-2024-3263-improper-authentication-in-yms-vis-pro/
• https://www.svps.sk/vis/

Published

May 14, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-32620HDF5 Library through 1.14.3 contains a heap-based buffer ove…7.4
• CVE-2024-32621HDF5 Library through 1.14.3 contains a heap-based buffer ove…9.8
• CVE-2024-32622HDF5 Library through 1.14.3 contains a out-of-bounds read op…9.1
• CVE-2024-32623HDF5 Library through 1.14.3 contains a heap-based buffer ove…8.8
• CVE-2024-32624HDF5 Library through 1.14.3 contains a heap-based buffer ove…7.4
• CVE-2024-32625In OffloadAMRWriter, a scalar field is not initialized so wi…5.8
• CVE-2024-32631Out-of-Bounds read in ciCCIOTOPT in ASR180X will cause incor…8
• CVE-2024-32632A value in ATCMD will be misinterpreted by printf, causing i…6.6
• CVE-2024-32633An unsigned value can never be negative, so eMMC full disk t…4
• CVE-2024-32634In huge memory get unmapped area check, code can never be re…6.1
• CVE-2024-32635A vulnerability has been identified in JT2Go (All versions <…7.8
• CVE-2024-32636A vulnerability has been identified in JT2Go (All versions <…7.8