CVE-2024-45370: Socomec Easy Config System

High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days.

An authentication bypass vulnerability exists in the User profile management functionality of Socomec Easy Config System 2.6.1.0. A specially crafted database record can lead to unauthorized access. An attacker can modify a local database to trigger this vulnerability.

Affected products

• Socomec Easy Config System: version 2.6.1.0 only

Published 2025-12-01. Last modified 2026-09-26.