CVE-2024-38883

CVE-2024-38883 is a critical vulnerability affecting Horizon Business Services Inc. Caterease versions 16.0.1.1663 through 24.0.1.2405, and potentially later versions. It allows a remote attacker to force a "Drop Encryption Level" attack by negotiating a less secure algorithm, compromising data confidentiality and integrity. With a CVSS score of 9.1 (CRITICAL), this vulnerability is easily exploitable over the network with low attack complexity, potentially leading to full compromise of affected systems. While there is no evidence of active exploitation or public exploit code, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.