CVE-2024-23942

HIGH EPSS 1.4%

Published Mar 18, 20251y ago · Modified Jun 17, 20261w ago

7.1 CVSS 3.1

High

Published Mar 18, 2025 1y ago

Last Modified Jun 17, 2026 1w ago

Description

A local user may find a configuration file on the client workstation with unencrypted sensitive data. This allows an attacker to impersonate the device or prevent the device from accessing the cloud portal which leads to a DoS.

CVSS Details

Base Score

7.1

Exploitability

1.8

Impact

5.2

Vector string

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Attack Vector Local

Attack Complexity Low

Privileges Required Low

User Interaction None

Scope Unchanged

Confidentiality High

Integrity None

Availability High

Threat Intelligence

EPSS Exploit Probability

1.4% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-312

References 1

cert.vde.com https://cert.vde.com/en/advisories/VDE-2024-010

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.