CVE-2024-35244

CriticalCVSS 9.1/10Last modified Jun 17, 2026

Description

There are several hidden accounts. Some of them are intended for maintenance engineers, and with the knowledge of their passwords (e.g., by examining the coredump), these accounts can be used to re-configure the device. As for the details of affected product names, model numbers, and versions, refer to the information provided by the respective vendors listed under [References].

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-798

Affected software

No affected versions have been published.

Timeline

Published: Nov 26, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-352456.7Uncontrolled search path element in some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.60 may allow an authenticated CVE-2024-352467.5An attacker may be able to cause a denial-of-service condition by sending many packets repeatedly.CVE-2024-352475.5In the Linux kernel, the following vulnerability has been resolved: fpga: region: add owner module and take its refcount The current imple CVE-2024-352487.3Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability CVE-2024-352498.8Microsoft Dynamics 365 Business Central Remote Code Execution Vulnerability CVE-2024-35255.4A vulnerability, which was classified as problematic, was found in Campcodes Online Event Management System 1.0. Affected is an unknown func CVE-2024-352507.8Windows Kernel-Mode Driver Elevation of Privilege Vulnerability CVE-2024-352527.5Azure Storage Movement Client Library Denial of Service Vulnerability CVE-2024-352534.4Microsoft Azure File Sync Elevation of Privilege Vulnerability CVE-2024-352547.1Azure Monitor Agent Elevation of Privilege Vulnerability CVE-2024-352555.5Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability CVE-2024-352568.8SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability