This vulnerability (CVE-2024-6656) affects TNB Mobile Solutions Cockpit Software versions before 2.13 and is caused by the presence of hard-coded credentials in the software executable. An attacker can extract these sensitive strings, potentially compromising security. The CVSS 4.0 base score is 8.8 (high), reflecting network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality. No vendor advisory or patch information is currently available, and the software is not a cloud service.

The vulnerability allows an unauthenticated remote attacker to read sensitive hard-coded credentials from the executable, which could lead to unauthorized access or further compromise depending on how these credentials are used. The high CVSS score indicates significant confidentiality impact. However, there are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected software and monitor for any unusual activity related to credential misuse. Avoid deploying affected versions in sensitive environments if possible.