Skip to content
OpenAdvisories
Medium · 4.2 CVE-2024-3082 EUVD-2024-31688GHSA-qxx3-fwc4-2mv7

A “CWE-256: Plaintext Storage of a Password” affecting the administrative account allows an attacker with physical access to the machine to…

Published Jul 31, 2024 · Updated Sep 30, 2024 · Assigned by Nozomi

Description

A “CWE-256: Plaintext Storage of a Password” affecting the administrative account allows an attacker with physical access to the machine to retrieve the password in cleartext unless specific security measures at other layers (e.g., full-disk encryption) have been enabled.

Affected products

VendorProductAffectedFixed
Plug&Track Sensor Net Connect V2 2.24 —

References