CVE-2024-30480 describes an authentication bypass by spoofing vulnerability (CWE-290) in Pippin Williamson's CGC Maintenance Mode product, versions up to 1.2. This vulnerability allows an attacker to bypass authentication mechanisms, resulting in unauthorized access to maintenance mode functionality. The CVSS 3.1 base score is 3.7, reflecting low severity due to the requirement of network access with high attack complexity and no privileges or user interaction needed. No official remediation or patch has been published, and no known exploits have been reported.

The vulnerability allows an attacker to bypass authentication controls and gain unauthorized access to maintenance mode features, potentially enabling functionality bypass. However, the impact is limited as it does not affect confidentiality, integrity, or availability of the system beyond this scope. The low CVSS score reflects the limited impact and higher attack complexity.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, monitor vendor communications for updates. No specific mitigations have been provided by the vendor at this time.