CVE-2024-28065

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

In Unify CP IP Phone firmware 1.10.4.3, files are not encrypted and contain sensitive information such as the root password hash.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:N

Weakness enumeration

CWE-312

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Apr 5, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-280668.8In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password).CVE-2024-280673.7A vulnerability in Samsung Exynos Modem 5300 allows a Man-in-the-Middle (MITM) attacker to downgrade the security mode of packets going to tCVE-2024-280685.3A vulnerability was discovered in SS in Samsung Mobile Processor, Wearable Processor, and Modems with versions Exynos 9820, Exynos 9825, ExyCVE-2024-280697.5A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to CVE-2024-28079.8A vulnerability classified as critical was found in Tenda AC15 15.03.05.18/15.03.20_multi. This vulnerability affects the function formExpanCVE-2024-280706.8A vulnerability in the legacy chat component of Mitel MiContact Center Business through 10.0.0.4 could allow an unauthenticated attacker to CVE-2024-280724.9A highly privileged account can overwrite arbitrary files on the system with log output. The log file path tags were not sanitized properly.CVE-2024-280737.2SolarWinds Serv-U was found to be susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability requires a highly priviCVE-2024-280748.8It was discovered that a previous vulnerability was not completely fixed with SolarWinds Access Rights Manager. While some controls were impCVE-2024-280758.0The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an authenticated userCVE-2024-280763.8The SolarWinds Platform was susceptible to a Arbitrary Open Redirection Vulnerability. A potential attacker can redirect to different domainCVE-2024-280777.5A denial-of-service issue was discovered on certain GL-iNet devices. Some websites can detect devices exposed to the external network throug
CVE-2024-28065: Medium severity, CVSS 5.9 | Vulnix