Threats tagged 'ghsa-gfq7-h592-v3xj'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 1.0%	CVE-2024-24681Yealink Configuration Encrypt Tool below verrsion · Insecure AES Key Critical9.8EPSS 1.0%2024-02-24GCVE DatabaseCVE-2024-24681 CVE-2024-24681 is a critical vulnerability in Yealink Configuration Encrypt Tool versions below 1.2. The tool uses a single, vendor-wide hardcoded AES key to encrypt provisioning documents. This key was leaked, compromising the confidentiality of these documents. EPSS 1.0%Report on CVE-2024-24681 Vulnerability CWE-798 #ghsa-gfq7-h592-v3xj	GCVE Database	2024-02-24

Page 1 of 1