Local Attackers Can Obtain Sensitive Information via Hard-Coded AES Key-IV Pair in AMCS Group Trux Waste Management Software
CVE-2024-22734
Currently unrated
Key Information:
- Vendor
AMCS Group
- Vendor
- CVE Published:
- 12 April 2024
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2024-22734?
An issue was discovered in AMCS Group Trux Waste Management Software before version 7.19.0018.26912, allows local attackers to obtain sensitive information via a static, hard-coded AES Key-IV pair in the TxUtilities.dll and TruxUser.cfg components.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.