CVE-2024-12902 HIGH

CVE-2024-12902: Global Wisdom Software ANCHOR - Undocumented Privileged Account

Vendor Global Wisdom Software
Product ANCHOR
Weakness CWE-1392
Published December 23, 2024
Last update December 24, 2024
View on NVD All CVEs

CVSS base score

8.4/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

ANCHOR from Global Wisdom Software is an integrated product running on a Windows virtual machine. The underlying Windows OS of the product contains high-privilege service accounts. If these accounts use default passwords, attackers could remotely log in to the virtual machine using the default credentials.

Key dates

02Disclosure timeline

December 23, 2024 CVE published
December 24, 2024 Record updated