CVE-2023-33742
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
TeleAdapt RoomCast TA-2400 versions 1.0 through 3.1 suffers from cleartext storage of sensitive information: RSA private key in Update.exe.
Risk Assessment
Storing the private key in plaintext may lead to unauthorized access to the system and data, posing a serious security threat to the organization.
Recommendation
It is recommended to update the software to the latest version and secure private keys by properly encrypting them.
Other vulnerabilities in TeleAdapt RoomCast TA-2400
See all- CVE-2023-33745Critical
TeleAdapt RoomCast TA-2400 versions 1.0 through 3.1 are vulnerable to improper privilege management. After establishing an adb connection, entering the su command provides root access without requiring a password.
- CVE-2023-33744Critical
TeleAdapt RoomCast TA-2400 devices from versions 1.0 to 3.1 suffer from the use of hard-coded passwords (PINs), including values: 385521, 843646, and 592671.
- CVE-2023-33743Critical
TeleAdapt RoomCast TA-2400 versions 1.0 through 3.1 is vulnerable to improper access control, specifically allowing access to Android Debug Bridge (adb).
Original NVD description (English source)
TeleAdapt RoomCast TA-2400 1.0 through 3.1 suffers from Cleartext Storage of Sensitive Information: RSA private key in Update.exe.