IM
IronMonkey Threat Research

CVE-2024-8070 HIGH

Published: 2024-10-13 | Last Modified: 2026-04-15 | Status: Deferred

Description

CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that exposes test credentials in the firmware binary

Additional Descriptions (1)

CWE-312: Existe una vulnerabilidad de almacenamiento de información confidencial en texto plano que expone las credenciales de prueba en el binario del firmware.

CVSS Metrics

Base Score: 8.5 (HIGH)

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L

Attack VectorLOCAL
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeCHANGED
Confidentiality ImpactHIGH
Integrity ImpactLOW
Availability ImpactLOW

Source: [email protected]

Type: Secondary

Exploitability Score: 2.5

Impact Score: 5.3

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-312
Notification
Message here