VULNERABILITY INTELLIGENCE
CVE-2008-2747
CVSS score2.1 LOW
EPSS probability0.31%
CISA KEVNot currently listed
Published2008-06-18
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:N/A:N
Description
No-IP Dynamic Update Client (DUC) 2.2.1 on Windows uses weak permissions for the HKLM\SOFTWARE\Vitalwerks\DUC registry key, which allows local users to obtain obfuscated passwords and other sensitive information by reading the (1) TrayPassword, (2) Username, (3) Password, and (4) Hosts registry values.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor