First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2024-8070

HighCVSS 8.5/10Last modified Jun 17, 2026

Description

CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that exposes test credentials in the firmware binary

Metrics

CVSS 3.1 8.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L

Weakness enumeration

Affected software

Vendor	Product	Versions
Schneider Electric	EVlink Home Smart	All versions prior to 2.0.6.0.0
Schneider Electric	Schneider Charge	All versions prior to 1.13.4

References

https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2024-282-04&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-282-04.pdf

Timeline

Published: Oct 13, 2024
Last modified: Jun 17, 2026
NVD status: Deferred

Related CVEs from 2024

CVE-2024-80717.2Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 and 9.8.x <= 9.8.2 fail to restrict which roles can promote a user as s CVE-2024-80725.3Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users CVE-2024-80739.8Improper Input Validation vulnerability in Hillstone Networks Hillstone Networks Web Application Firewall on 5.5R6 allows Command Injection.CVE-2024-80749.3Missing Authentication for Critical Function, Missing Authorization vulnerability in Nomysoft Informatics Nomysem allows Collect Data as Pro CVE-2024-80759.8A vulnerability has been found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228 and classified as critical. Affected by this vulnerability is the CVE-2024-80769.8A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228 and classified as critical. Affected by this issue is the function set CVE-2024-80779.8A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228. It has been classified as critical. This affects the function setTrac CVE-2024-80789.8A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228. It has been declared as critical. This vulnerability affects the func CVE-2024-80799.8A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228. It has been rated as critical. This issue affects the function export CVE-2024-80809.8A vulnerability classified as critical has been found in SourceCodester Online Health Care System 1.0. Affected is an unknown function of th CVE-2024-80819.8A vulnerability classified as critical was found in itsourcecode Payroll Management System 1.0. Affected by this vulnerability is an unknown CVE-2024-80824.3The Widgets Reset WordPress plugin through 0.1 does not have CSRF check in place when updating its settings, which could allow attackers to

CVE-2024-8070: High severity, CVSS 8.5 | Vulnix