CVE-2024-28140

The scanner device boots into a kiosk mode by default and opens the Scan2Net interface in a browser window. This browser is run with the permissions of the root user. There are also several other applications running as root user. This can be confirmed by running "ps aux" as the root user and observing the output.

• CWE-250

• https://r.sec-consult.com/imageaccess
• https://www.imageaccess.de/?page=SupportPortal&lang=en
• http://seclists.org/fulldisclosure/2024/Dec/2

Published

Dec 11, 2024

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-28135A low privileged remote attacker can use a command injection…5
• CVE-2024-28136A local attacker with low privileges can use a command injec…7.8
• CVE-2024-28137 …7.8
• CVE-2024-28138An unauthenticated attacker with network access to the affec…7.3
• CVE-2024-28139The www-data user can elevate its privileges because sudo is…8.8
• CVE-2024-2814A vulnerability was found in Tenda AC15 15.03.20_multi. It h…9.8
• CVE-2024-28141The web application is not protected against cross-site requ…6.3
• CVE-2024-28142Due to missing input sanitization, an attacker can perform c…4.7
• CVE-2024-28143The password change function at /cgi/admin.cgi does not requ…8.4
• CVE-2024-28144An attacker who can spoof the IP address and the User-Agent …5.5
• CVE-2024-28145An unauthenticated attacker can perform an SQL injection by …5.9
• CVE-2024-28146The application uses several hard-coded credentials to encry…8.4