CVE-2024-28146 — Hardcoded credentials

CVE-2024-28146

Hardcoded credentials PUBLISHED

Description (CNA)

The application uses several hard-coded credentials to encrypt config files during backup, to decrypt the new firmware during an update and some passwords allow a direct connection to the database server of the affected device.

Affected (CNA)

Vendor / product	Versions
Image Access GmbH / Scan2Net	affected 0 before 7.42

CWE

CWE-798

References

https://r.sec-consult.com/imageaccess
https://www.imageaccess.de/?page=SupportPortal&lang=en

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

http://seclists.org/fulldisclosure/2024/Dec/2