CVE-2024-5716

CRITICAL

Logsign Unified SecOps Platform 6.4.6-6.4.8 - Unauthenticated Authentication Bypass via Password Reset Mechanism

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-5716. PoCs published by byjanke.

AI-analyzed exploit summary This repository contains functional exploit code for CVE-2024-5716 (authentication bypass) and CVE-2024-5717 (command injection) in Logsign Unified SecOps Platform. It includes a Python exploit script, Metasploit modules, and a Nuclei template for detection.

Description

Logsign Unified SecOps Platform Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of Logsign Unified SecOps Platform. Authentication is not required to exploit this vulnerability. The specific flaw exists within the password reset mechanism. The issue results from the lack of restriction of excessive authentication attempts. An attacker can leverage this vulnerability to reset a user's password and bypass authentication on the system. Was ZDI-CAN-24164.

Exploits (1)

github WORKING POC 2 stars

by byjanke · pythonpoc

https://github.com/byjanke/logsign-rce

View Code ZIP pw:eip

This repository contains functional exploit code for CVE-2024-5716 (authentication bypass) and CVE-2024-5717 (command injection) in Logsign Unified SecOps Platform. It includes a Python exploit script, Metasploit modules, and a Nuclei template for detection.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Logsign Unified SecOps Platform

No auth needed

Prerequisites: network access to target · target running vulnerable Logsign version

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter T1203 - Exploitation for Client Execution

devstral-2 · analyzed Jun 13, 2026 Full analysis →

References (2)

Core 2

Core References

Third Party Advisory x_research-advisory

https://www.zerodayinitiative.com/advisories/ZDI-24-616/

Patch vendor-advisory

https://support.logsign.net/hc/en-us/articles/19316621924754-03-06-2024-Version-6-4-8-Release-Notes

Scores

CVSS v3 9.8

EPSS 0.0157

EPSS Percentile 72.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-307

Status published

Products (1)

logsign/unified_secops_platform 6.4.6 - 6.4.8

Published Nov 22, 2024

Tracked Since Feb 18, 2026