CVE-2024-8773 - CVE House
Back to Database
Status published High CVE-2024-8773

Protocol Downgrade in SIMPLE.ERP

Vulnerability Description

SIMPLE.ERP client is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data interception and modification. This issue affect SIMPLE.ERP from 6.20 to 6.30. Only the 6.30 version received a patch 6.30@a03.9, which make it possible for an administrator to enforce encrypted communication. Versions 6.20 and 6.25 remain unpatched.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-8773

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • dr inż. Marcin Ochab

References

More from Simple SA

View All →
CVE-2025-9339
SQL Injection in SIMPLE.ERP
High 7.1
CVE-2025-12140
RCE in Wirtualna Uczelnia
Critical 9.3
CVE-2024-8774
Privilege Escalation in SIMPLE.ERP
High 7.7

Affected Vendor

Affected Software

SIMPLE.ERP
Vulnerable Versions:
6.20

Timeline

Official Publish: March 24th, 2025
Last Modified: March 24th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-757

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.