Skip to content
OpenAdvisories
Medium ICSA-24-249-01 2 CVEs

Hughes Network Systems WL3000 Fusion Software

Published Sep 5, 2024 · Updated Sep 5, 2024

Vendor: Hughes Network Systems Product: WL3000 Fusion Software

Summary

Successful exploitation of these vulnerabilities could allow an attacker to obtain read-only access to network configuration information and terminal configuration data.

Vulnerabilities 2

  • Medium 6.5
    CVE-2024-42495

    Hughes Network Systems WL3000 Missing Encryption of Sensitive Data

    Credentials to access device configuration were transmitted using an unencrypted protocol. These credentials would allow read-only access to network configuration information and terminal configuration data.

    Hughes Network Systems WL3000 Fusion Software
  • Medium 4.2
    CVE-2024-39278

    Hughes Network Systems Insufficiently Protected Credentials

    Credentials to access device configuration information stored unencrypted in flash memory. These credentials would allow read-only access to network configuration information and terminal configuration data.

    Hughes Network Systems WL3000 Fusion Software

Revision history

  1. #1

    Initial Publication

References