CVE-2024-41629 Hardcoded credentials in n/a

Medium 6.6 Published Updated

A local attacker can obtain sensitive information from Texas Instruments Fusion Digital Power Designer due to plaintext credential storage.

Exploited in the wild
Not known
Login needed
Any signed-in user
Attackable
Local or same network only
Victim action needed
Not needed
Fix
None listed

What is CVE-2024-41629?

CVE-2024-41629 is a medium-severity vulnerability in n/a, published on 12 Sep 2024. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An issue in Texas Instruments Fusion Digital Power Designer v.7.10.1 allows a local attacker to obtain sensitive information via the plaintext storage of credentials

Weakness: CWE-312, CWE-200

Which versions are affected by CVE-2024-41629?

It affects 1 product.

Products include Ti Fusion Digital Power Designer.

How do I fix CVE-2024-41629?

No fix has been published for CVE-2024-41629 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-41629 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-41629 exists.

Sources

Also known as GHSA-x863-gchp-57m3.

Is CVE-2024-41629 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free