Critical severity9.8NVD Advisory· Published May 22, 2025· Updated Jun 17, 2026

CVE-2024-41197

Description

An issue in Ocuco Innovation - INVCLIENT.EXE v2.10.24.5 allows attackers to bypass authentication and escalate privileges to Administrator via a crafted TCP packet.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ocuco/Innovation Trackingcpe-rescue
Ocuco/INVCLIENT.EXEllm-create
Range: =2.10.24.5

Patches

Vulnerability mechanics

References

gist.githubusercontent.com/john0x186/1d9cc7fcc8386480d2bdaa9fdcfa914b/raw/d2d3d74ccaa939127ee2b03139061509a7dd238c/full-disclosure.mdnvdExploit
drive.google.com/file/d/1XgbcJqYIHxAROcCACdgdD8V_97Hcwdze/viewnvdPermissions Required

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000