CVE-2024-11308

CVSS V2 None CVSS V3 None
Description
The DVC from TRCore encrypts files using a hardcoded key. Attackers can use this key to decrypt the files and restore the original content.
Overview
  • CVE ID
  • CVE-2024-11308
  • Assigner
  • twcert
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-11-18T05:59:30.085Z
  • Last Modified Date
  • 2024-11-18T13:57:50.912Z
Weakness Enumerations
CWE URL
CWE-321 http://cwe.mitre.org/data/definitions/321.html
References
Reference URL Reference Tags
https://www.twcert.org.tw/tw/cp-132-8240-562c3-1.html third-party-advisory
https://www.twcert.org.tw/en/cp-139-8241-1af92-2.html third-party-advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2024-11308
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-11308
History
Created Old Value New Value Data Type Notes
2024-11-19 13:23:11 Added to TrackCVE