Unauthenticated Attacker Can Compromise Devices Due to Weak Encryption Implementation

CVE-2024-45273

What is CVE-2024-45273?

An identified vulnerability allows unauthenticated local attackers to decrypt the device's configuration file, exposing sensitive information and potentially compromising the device's integrity. This issue stems from a weak encryption implementation, highlighting the need for improved security measures in the affected products. The vulnerability poses serious risks, particularly in environments where device security is paramount, necessitating prompt attention and remediation from users and administrators.

References