CVE-2024-9334
High
Description
Use of Hard-coded Credentials, Storage of Sensitive Data in a Mechanism without Access Control vulnerability in E-Kent Pallium Vehicle Tracking allows Authentication Bypass. This issue affects Pallium Vehicle Tracking: before 17.10.2024.
SeverityHigh
CVSS8.2
Exploit probability—
ProductPallium Vehicle Tracking
PublishedFeb 27, 2025
First seenFeb 27, 2025
Weakness typeCWE-798Hard-coded credentialsCWE-921CWE-921
How to fix
Update
- E-Kent Pallium Vehicle Tracking17.10.2024 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| E-Kent Pallium Vehicle Tracking | v < 17.10.2024 | 17.10.2024 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.