Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2024-39206

Description

An issue discovered in MSP360 Backup Agent v7.8.5.15 and v7.9.4.84 allows attackers to obtain network share credentials used in a backup due to enginesettings.list being encrypted with a hard coded key.

POC

Reference

- https://www.proactivelabs.com.au/2024/06/19/cloudberry.html

Github

No PoCs found on GitHub currently.