VulnerabilityDeferred

CVE-2024-45832

Hard-coded credentials were included as part of the application binary.

LOW 2.0EPSS 0.29%

Does this matter?

Lower severity and a low EPSS score (0.29%). Track it; it rarely justifies an emergency change on its own.

Description

Hard-coded credentials were included as part of the application binary. These credentials served as part of the application authentication flow and communication with the mobile application. An attacker could access unauthorized information.

CVSS 4.0: 2.0 LOWCVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.29% probability · 21th percentile
CISA KEV: Not listed
Weakness: CWE-798
Source: ics-cert@hq.dhs.gov

References

https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-354-01

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.