CVE-2024-23942: MB connect line: Configuration File on the client workstation is not encrypted
A local user may find a configuration file on the client workstation with unencrypted sensitive data. This allows an attacker to impersonate the device or prevent the device from accessing the cloud portal which leads to a DoS.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-23942?
CVE-2024-23942 has a medium severity due to the potential for sensitive data exposure and possible denial of service.
How do I fix CVE-2024-23942?
To fix CVE-2024-23942, ensure sensitive configuration files are encrypted and follow best security practices for file management.
What types of devices are affected by CVE-2024-23942?
CVE-2024-23942 affects client workstations using the MB connect line software.
What are the risks associated with CVE-2024-23942?
The risks associated with CVE-2024-23942 include unauthorized access, device impersonation, and potential denial of service.
Is there a workaround for CVE-2024-23942?
A possible workaround for CVE-2024-23942 is to restrict access to the configuration files and implement strict user permissions.