CVE-2024-45275

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Oct 15, 2024
Updated: Nov 21, 2024
CWE ID 798

Summary

CVE-2024-45275 is a newly disclosed vulnerability affecting certain devices. This issue arises due to the presence of two hardcoded user accounts, each with a hardcoded password. An unauthenticated attacker can exploit this vulnerability remotely, gaining full control over the affected devices. The implications of this vulnerability are significant, as it allows an attacker to bypass authentication and potentially take complete control of the system. This can lead to data theft, unauthorized access, and even system damage. Users are urged to apply patches or updates as soon as they become available to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share