A local user may find a configuration file on the client workstation with unencrypted sensitive data. This allows an attacker to impersonate the device or prevent the device from accessing the cloud portal, leading to a denial of service (DoS).
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.1 | CVE-2024-23942 |
Exploitation
To exploit this vulnerability, an attacker with local access to the client workstation can locate the unencrypted configuration file containing sensitive data. By using this information, the attacker can impersonate the device or disrupt its access to the cloud portal, resulting in a denial of service.
Affected Products
- Client Workstation: The device that stores the configuration file with sensitive data.
Mitigation
To mitigate this vulnerability, it is recommended to encrypt sensitive configuration files on client workstations to prevent unauthorized access. Additionally, implementing strict access controls and monitoring can help detect and prevent exploitation attempts.