CVE-2024-34399

9.8 criticalEPSS 0.5%Unsupported when assigned

Critical (9.8) in bmc remedy mid-tier. No vendor fix: the product was unsupported when the CVE was assigned. EPSS 0.5% chance of exploitation in the next 30 days.

An issue was discovered in BMC Remedy Mid Tier 7.6.04. An unauthenticated remote attacker is able to access any user account without using any password. NOTE: This vulnerability only affects products that are no longer supported by the maintainer and the impacted version for this vulnerability is 7.6.04 only.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2024-09-18
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

bmc:remedy_mid-tier

References

https://www.gruppotim.it/it/footer/red-team.html

Check your stack JSON