CVE-2024-28146 Information

Description

The application uses several hard-coded credentials to encrypt config files during backup to decrypt the new firmware during an update and some passwords allow a direct connection to the database server of the affected device.

Reference

https://r.sec-consult.com/imageaccess https://www.imageaccess.de/?page=SupportPortal&lang=en