Vulnerability · Published Feb 27, 2025 · Assigned by TR-CERT
CVE-2024-9334Information Disclosure in E-Kent's Pallium Vehicle Tracking
High 8.2
In plain English
A high-severity hard-coded credentials in Pallium Vehicle Tracking from E-Kent. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities).
Severity (CVSS 3.1)8.2High
Exploit odds (30 days)0.4%top 69.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Use of Hard-coded Credentials, Storage of Sensitive Data in a Mechanism without Access Control vulnerability in E-Kent Pallium Vehicle Tracking allows Authentication Bypass. This issue affects Pallium Vehicle Tracking: before 17.10.2024.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| E-Kent | Pallium Vehicle Tracking | 0 – before 17.10.2024 |
Weakness: CWE-798, CWE-921 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
References
- https://www.usom.gov.tr/bildirim/tr-25-0044 government-resource, broken-link
- https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-25-0044 government-resource