Skip to content
OpenAdvisories
Medium · 6.5 CVE-2024-42495 EUVD-2024-39646GHSA-xpqq-5557-v5jm

Hughes Network Systems WL3000 Missing Encryption of Sensitive Data

Published Sep 5, 2024 · Updated Sep 6, 2024 · Assigned by icscert

Description

Credentials to access device configuration were transmitted using an unencrypted protocol. These credentials would allow read-only access to network configuration information and terminal configuration data.

Affected products

VendorProductAffectedFixed
Hughes Network Systems WL3000 Fusion Software < 2.7.0.10 2.7.0.10

Advisories 1

References