CVE-2024-8070

HighCVSS 8.5/10Last modified Jun 17, 2026

Description

CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that exposes test credentials in the firmware binary

Metrics

CVSS 3.1 8.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L

Weakness enumeration

CWE-312

Affected software

No affected versions have been published.

Timeline

Published
Oct 13, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-80717.2Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 and 9.8.x <= 9.8.2 fail to restrict which roles can promote a user as sCVE-2024-80725.3Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary usersCVE-2024-80739.8Improper Input Validation vulnerability in Hillstone Networks Hillstone Networks Web Application Firewall on 5.5R6 allows Command Injection.CVE-2024-80749.3Missing Authentication for Critical Function, Missing Authorization vulnerability in Nomysoft Informatics Nomysem allows Collect Data as ProCVE-2024-80759.8A vulnerability has been found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228 and classified as critical. Affected by this vulnerability is theCVE-2024-80769.8A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228 and classified as critical. Affected by this issue is the function setCVE-2024-80779.8A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228. It has been classified as critical. This affects the function setTracCVE-2024-80789.8A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228. It has been declared as critical. This vulnerability affects the funcCVE-2024-80799.8A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228. It has been rated as critical. This issue affects the function exportCVE-2024-80809.8A vulnerability classified as critical has been found in SourceCodester Online Health Care System 1.0. Affected is an unknown function of thCVE-2024-80819.8A vulnerability classified as critical was found in itsourcecode Payroll Management System 1.0. Affected by this vulnerability is an unknownCVE-2024-80824.3The Widgets Reset WordPress plugin through 0.1 does not have CSRF check in place when updating its settings, which could allow attackers to
CVE-2024-8070: High severity, CVSS 8.5 | Vulnix