High severity7.5NVD Advisory· Published Oct 28, 2024· Updated Jun 17, 2026

CVE-2024-10438

Description

The eHRD CTMS from Sunnet has an Authentication Bypass vulnerability, allowing unauthenticated remote attackers to bypass authentication by satisfying specific conditions in order to access certain functionalities.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Sun.net/Ehrd Ctms3 versions
cpe:2.3:a:sun.net:ehrd_ctms:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:sun.net:ehrd_ctms:*:*:*:*:*:*:*:*range: <10.14
- (no CPE)
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

www.twcert.org.tw/en/cp-139-8165-7da2f-2.htmlnvdThird Party Advisory
www.twcert.org.tw/tw/cp-132-8164-fe7c5-1.htmlnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000