Initial System Credentials at Risk of Confidentiality Loss Due to Lack of Protection

CVE-2024-38877

Summary

A security vulnerability exists in the Omnivise T3000 product line that compromises the security of initial system credentials by storing them without adequate protection. This flaw permits an attacker, who gains remote shell or physical access, to retrieve sensitive credentials. The exposure of these credentials can lead to unauthorized lateral movement within the network, severely jeopardizing data confidentiality and overall system integrity. Organizations utilizing the affected Omnivise T3000 products are urged to assess their vulnerability and implement necessary security measures.

References