CVE-2024-6656 Hardcoded Credentals in TNB Mobile Solutions' Cockpit Software
Attackers can extract sensitive strings from the executable due to hardcoded credentials, potentially compromising data access.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-6656?
CVE-2024-6656 is a high-severity vulnerability in TNB Mobile Solutions Cockpit Software, published on 13 Sep 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Use of Hard-coded Credentials vulnerability in TNB Mobile Solutions Cockpit Software allows Read Sensitive Strings Within an Executable.
This issue affects Cockpit Software: before v2.13.
Weakness: CWE-798
Which versions are affected by CVE-2024-6656?
It affects 1 product.
Products include Tnbmobil Cockpit.
How do I fix CVE-2024-6656?
No fix has been published for CVE-2024-6656 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-6656 being exploited?
There is no known exploitation of CVE-2024-6656 in the wild and no public exploit code.
Other vulnerabilities in TNB Mobile Solutions Cockpit Software
Sources
Also known as GHSA-hf4q-fmf3-3xvp.