CVE-2024-10523

CVSS V2 None CVSS V3 None

Description

This vulnerability exists in TP-Link IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the vulnerable device.

Overview

CVE ID
CVE-2024-10523

Assigner
CERT-In

Vulnerability Status
PUBLISHED

Published Version
2024-11-04T12:00:05.802Z

Last Modified Date
2024-11-04T15:06:40.613Z

Weakness Enumerations

CWE	URL
CWE-312	http://cwe.mitre.org/data/definitions/312.html

References

Reference URL	Reference Tags
https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0331	third-party-advisory

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-10523
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10523

History

Created	Old Value	New Value	Data Type	Notes
2024-11-05 13:18:45				Added to TrackCVE