PT-2024-13699 · Precor · Precor Touchscreen Console

Anthony Ioppolo + 1 · Published 2024-06-07 · Updated 2024-09-13 · CVE-2023-49224

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Precor touchscreen console versions P62, P80, and P82

Description The issue concerns a default SSH public key in the authorized keys file, which could be exploited by a remote attacker to gain root privileges.

Recommendations For Precor touchscreen console versions P62, P80, and P82, remove the default SSH public key from the authorized keys file to prevent unauthorized access.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2023-49224

Affected Products

Precor Touchscreen Console

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-49224 · Security Note
• https://t.me/cvenotify/94519 · Telegram Post
• https://twitter.com/CVEnew/status/1799176393819099512 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1799211501758099467 · Twitter Post
• https://t.me/cvenotify/82336 · Telegram Post
• https://t.me/cvenotify/82515 · Telegram Post
• https://securityintelligence.com/x-force/internet-connected-treadmill-vulnerabilities-discovered · Note