Goal Reached Thanks to every supporter โ€” we hit 100%!

Goal: 1000 CNY ยท Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-10600 โ€” AI Deep Analysis Summary

CVSS 7.3 ยท High

Q1What is this vulnerability? (Essence + Consequences)

๐Ÿšจ **Essence**: SQL Injection in TONGDA OA 2017. ๐Ÿ’ฅ **Consequences**: Attackers can manipulate the `appid` parameter to execute arbitrary SQL commands.โ€ฆ
Read full answer (login)

Q2Root Cause? (CWE/Flaw)

๐Ÿ›ก๏ธ **Root Cause**: CWE-89 (SQL Injection). ๐Ÿ› **Flaw**: The application fails to properly sanitize the `appid` input parameter before using it in SQL queries.โ€ฆ
Read full answer (login)

Q3Who is affected? (Versions/Components)

๐Ÿข **Vendor**: Tongda (Beijing Tongda Xinke Technology). ๐Ÿ“ฆ **Product**: TONGDA Office Anywhere (OA 2017). ๐Ÿ“… **Affected Versions**: Version 2017 11.6 and earlier.โ€ฆ
Read full answer (login)

Q4What can hackers do? (Privileges/Data)

๐Ÿ•ต๏ธ **Hackers Can**: Extract sensitive database contents (user credentials, internal docs). ๐Ÿ”„ **Modify**: Alter or delete records within the OA system.โ€ฆ
Read full answer (login)

Q5Is exploitation threshold high? (Auth/Config)

๐Ÿ”“ **Auth Requirement**: None (PR:N). ๐ŸŒ **Access**: Network accessible (AV:N). ๐ŸŽฏ **Complexity**: Low (AC:L). ๐Ÿค **User Interaction**: None (UI:N). โœ… **Threshold**: VERY LOW.โ€ฆ
Read full answer (login)

Q6Is there a public Exp? (PoC/Wild Exploitation)

๐Ÿ“‚ **Public Exploit**: Yes. ๐Ÿ”— **References**: GitHub issue #3 (LvZCh/td) and VDB entries indicate active exploitation and PoCs.โ€ฆ
Read full answer (login)

Q7How to self-check? (Features/Scanning)

๐Ÿ” **Self-Check**: Scan for TONGDA OA 2017 instances. ๐Ÿงช **Test**: Send crafted payloads targeting the `appid` parameter in requests.โ€ฆ
Read full answer (login)

Q8Is it fixed officially? (Patch/Mitigation)

๐Ÿ› ๏ธ **Official Fix**: Yes, implied by version cutoff (v11.6 is the last vulnerable). ๐Ÿ“ฅ **Action**: Upgrade to TONGDA OA version > 11.6. ๐Ÿ”„ **Patch**: Apply the latest security update provided by Tongda.โ€ฆ
Read full answer (login)

Q9What if no patch? (Workaround)

๐Ÿšง **Workaround**: If patching is delayed, block external access to the OA system. ๐Ÿ›ก๏ธ **WAF**: Deploy Web Application Firewall rules to filter SQL injection patterns in `appid`.โ€ฆ
Read full answer (login)

Q10Is it urgent? (Priority Suggestion)

๐Ÿ”ฅ **Urgency**: HIGH. ๐Ÿšจ **Priority**: Immediate action required. ๐Ÿ“‰ **Risk**: Unauthenticated remote code execution/data leak. ๐Ÿ“… **Timeline**: Published Oct 2024, exploits already public.โ€ฆ
Read full answer (login)

Continue exploring

Vulnerability detail Full AI analysis (login) Tongda CWE-89