CyberSecBulletin

No-ip vulnerabilities

We track 1 vulnerability in No-ip products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 12, 2024.

1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score

Latest No-ip vulnerabilities

  • 9.1 Critical severity

    duc: Cleartext Storage of Sensitive Information

    CVE-2024-40457No-ip

    No-IP Dynamic Update Client (DUC) v3.x uses cleartext credentials that may occur on a command line or in a file. NOTE: the vendor's position is that cleartext in /etc/default/noip-duc is recommended and is the intentional behavior.