Unencrypted Configuration Exposure in Client Workstation Affects Vendor Product
CVE-2024-23942
7.1HIGH
What is CVE-2024-23942?
A local user can discover a poorly secured configuration file on their client workstation containing unencrypted sensitive information. This vulnerability potentially allows an attacker to impersonate the affected device, compromising its identity. Additionally, it can lead to denial-of-service (DoS) by preventing the device from successfully connecting to its cloud portal, thereby impacting service availability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
mbCONNECT24 0 < 2.16.2
mbNET 0 < 8.2.0
mbNET.rokey 0 < 8.2.0
