Is CVE-2024-5322 actively exploited?

No active exploitation of CVE-2024-5322 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2024-5322 be exploited remotely?

Yes. CVE-2024-5322 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2024-5322?

CVE-2024-5322 has a CVSS score of 9.1 (CRITICAL).

HOME VULNERABILITIESCVE-2024-5322

CRITICAL

CVE-2024-5322

CWE-288Published: July 1, 2024· Updated: Jun 17, 2026

9.1

CVSS v3.1

Official Description

The N-central server is vulnerable to session rebinding of already authenticated users when using Entra SSO, which can lead to authentication bypass.

This vulnerability is present in all Entra-supported deployments of N-central prior to 2024.3.

NVD Source

Risk Analysis

N-central servers using Entra SSO are vulnerable to session rebinding, which can lead to authentication bypass. This 9.1 CVSS vulnerability poses a critical risk to user sessions and administrative access.

No public exploit is known, and it is not in the CISA KEV. It is remotely exploitable with low complexity.

Recommended Action

Update N-central to version 2024.3 or later. Review authentication logs for suspicious activity until the patch is applied.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2024-5322 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), with a CVSS base score of 9.1.