CVE-2024-8773 is a high-severity vulnerability affecting SIMPLE.ERP client versions 6.20 through 6.30, allowing a server-side attacker to force a downgrade of the MS SQL protocol. This enables unencrypted communication, making data interception and modification possible. With a CVSS score of 8.3 (High), the vulnerability is network-exploitable with low attack complexity, potentially leading to high confidentiality and low integrity impacts. While a patch exists for version 6.30, versions 6.20 and 6.25 remain unpatched. There is currently no public exploit code, active exploitation, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Simple SA | SIMPLE.ERP |
CVSS version used by this source: 4.0
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.