CVE-2024-28146

Summary

CVE-2024-28146 is a newly disclosed vulnerability that affects several applications. This issue arises due to the use of hard-coded credentials for encrypting config files during backup and decrypting new firmware during an update. Additionally, certain passwords enable direct access to the affected device's database server. This combination of hard-coded credentials and unrestricted database access poses a significant risk for unauthorized access and manipulation of sensitive information.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.