Threats tagged 'ghsa-rfh8-64f6-3gcc'

CVE-2024-35244 describes the presence of several hidden accounts on a device, some intended for maintenance engineers. If an attacker obtains the passwords for these accounts, for example by analyzing a coredump, they could use them to reconfigure the device. Specific affected products, models, and versions are not detailed in the provided information and should be referenced from vendor advisories. The vulnerability has a high severity with a CVSS score of 9.1.