CVE-2024-39278
MEDIUMEchostar Fusion < 2.7.0.10 - Insufficiently Protected Credentials
Title source: ruleDescription
Credentials to access device configuration information stored unencrypted in flash memory. These credentials would allow read-only access to network configuration information and terminal configuration data.
Scores
CVSS v3
4.2
EPSS
0.0016
EPSS Percentile
36.8%
Attack Vector
PHYSICAL
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Classification
CWE
CWE-522
Status
published
Affected Products (1)
echostar/fusion
< 2.7.0.10
Timeline
Published
Sep 05, 2024
Tracked Since
Feb 18, 2026