CVE-2024-28146: Image Access GmbH SCAN2NET

High severity, CVSS 8.4. EPSS: 0.3% chance of exploitation in the next 30 days.

The application uses several hard-coded credentials to encrypt config files during backup, to decrypt the new firmware during an update and some passwords allow a direct connection to the database server of the affected device.

Affected products

Published 2024-12-12. Last modified 2026-06-17.