cve/2024/CVE-2024-40457.md

CVE-2024-40457

Description

No-IP Dynamic Update Client (DUC) v3.x uses cleartext credentials that may occur on a command line or in a file. NOTE: the vendor's position is that cleartext in /etc/default/noip-duc is recommended and is the intentional behavior.

POC

Reference

• https://github.com/jeppojeps/CVE-2024-40457-PoC

Github

• https://github.com/fkie-cad/nvd-json-data-feeds
• https://github.com/jeppojeps/CVE-2024-40457-PoC
• https://github.com/nomi-sec/PoC-in-GitHub