Critical severity9.8NVD Advisory· Published May 22, 2025· Updated Jun 17, 2026

CVE-2024-41196

Description

An issue in Ocuco Innovation - REPORTSERVER.EXE v2.10.24.13 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ocuco/Innovation Trackingcpe-rescue
Ocuco/REPORTSERVER.EXEllm-create
Range: 2.10.24.13

Patches

Vulnerability mechanics

References

gist.githubusercontent.com/john0x186/1d9cc7fcc8386480d2bdaa9fdcfa914b/raw/d2d3d74ccaa939127ee2b03139061509a7dd238c/full-disclosure.mdnvdExploit
cwe.mitre.org/data/definitions/285.htmlnvdTechnical Description
drive.google.com/file/d/1UqJAQiwhHZCHtgac4-YiJHElBYhqUu3M/viewnvdPermissions Required

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000