CVE-2024-34682

Summary

CVE-2024-34682 is a newly disclosed cybersecurity vulnerability affecting Settings prior to the SMR Nov-2024 Release 1. This issue grants physical attackers unauthorized access to stored WiFi passwords in Maintenance Mode through an improper authorization mechanism. Successful exploitation lets attackers gain unauthorized network access, potentially leading to further compromise of the affected system. It is crucial for organizations to apply the SMR Nov-2024 Release 1 patch as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.