# CVE-2024-1346

## Summary

- **CVE ID:** CVE-2024-1346
- **Severity:** MEDIUM
- **CVSS Score:** 6.8 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)
- **CWE:** CWE-521
- **Published:** Feb 19, 2024
- **Last Modified:** Mar 13, 2026

## Description

Weak MySQL database root password in LaborOfficeFree affects version 19.10. This vulnerability allows an attacker to calculate the root password of the MySQL database used by LaborOfficeFree using two constants.

## Affected Products

- LaborOfficeFree  — LaborOfficeFree  (19.10 )

## References

- [CNA](https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-laborofficefree)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.39%
- **EPSS Percentile:** 32.6

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-10._