CVE-2024-28146
High
Description
The application uses several hard-coded credentials to encrypt config files during backup, to decrypt the new firmware during an update and some passwords allow a direct connection to the database server of the affected device.
SeverityHigh
CVSS8.4
Exploit probability—
ProductScan2Net
PublishedDec 12, 2024
First seenDec 12, 2024
Weakness typeCWE-798Hard-coded credentials
How to fix
Update
- Image Access GmbH Scan2Net7.42 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Image Access GmbH Scan2Net | v < 7.42 | 7.42 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.