CVE-2024-22734

An issue was discovered in AMCS Group Trux Waste Management Software before version 7.19.0018.26912, allows local attackers to obtain sensitive information via a static, hard-coded AES Key-IV pair in the TxUtilities.dll and TruxUser.cfg components.

CVSS v3.1

6.2 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.73% chance of exploitation in the next 30 days, 52th percentile

Published

2024-04-12

Updated

2024-08-01

Proof-of-concept exploits (2)

• https://www.redlinecybersecurity.com/blog/cve-2024-22734
• securekomodo/CVE-2024-227342★ · 2024-12-01

References

• CVE Record
• NVD entry

Related

• CVE-2022-42889
• CVE-2024-22026
• CVE-2025-22457
• CVE-2024-22733
• CVE-2024-2274
• CVE-2024-22729