Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2024-42495

Hughes Network Systems WL3000 Missing Encryption of Sensitive Data

Description

Credentials to access device configuration were transmitted using an unencrypted protocol. These credentials would allow read-only access to network configuration information and terminal configuration data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hughes Network Systems WL3000 Fusion Software

Default version status: unaffected

  • 0 to < 2.7.0.10affected

References