CVE-2024-33849

The product uses weak credentials (such as a default key or hard-coded password) that can be calculated, derived, reused, or guessed by an attacker.

The use of a hard-coded cryptographic key significantly increases the possibility that encrypted data may be recovered.

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

The product violates well-established principles for secure design.