PatchTheCVECVE-2024-32213: The LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak passwords
CVE-2024-32213 is a medium-severity flaw (CVSS 5.3) affecting lomag warehouse management. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak passwords. By default, hard-coded passwords of 10 characters with little or no complexity are allowed.
Why this priority
- Public exploit reference
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 5.3 (Medium) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 0.9% (top 41%) |
| CISA exploited list | No |
| Weakness | CWE-521 |
| Published | 2024-05-01 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2024-32213?
lomag warehouse management: upgrade to newer than 1.0.20.120. Exact commands for each OS are on this page.
Is CVE-2024-32213 being exploited?
CVE-2024-32213 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2024-32213 affect?
CVE-2024-32213 affects lomag warehouse management. Severity is medium (CVSS 5.3). The LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak passwords. By default, hard-coded passwords of 10 characters with little or no complexity are allowed.
How urgent is CVE-2024-32213?
Priority 43/100. Public exploit reference; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2024-32212 HIGH 8.1 UPGRADE SQL Injection vulnerability in LOGINT LoMag Inventory Management v1.0.20.120 and before allows an attacker to
- CVE-2024-32211 MEDIUM 5.5 UPGRADE An issue in LOGINT LoMag Inventory Management v1.0.20.120 and before allows a local attacker to obtain sensiti
- CVE-2024-32210 MEDIUM 5.3 UPGRADE The LoMag WareHouse Management application version 1.0.20.120 and older were to utilize hard-coded passwords b