Hard-coded credentials pose security risk in new firmware update

CVE-2024-28146

What is CVE-2024-28146?

This vulnerability arises from the use of hard-coded credentials within the ImageAccess firmware, which are utilized to manage configuration file encryption during backups and to decrypt firmware updates. These credentials also facilitate unauthorized direct access to the database server of affected devices, significantly compromising system integrity and security. It is crucial for users to review their firmware versions and apply necessary updates to mitigate this risk.

References