Medium severity5.7NVD Advisory· Published Jan 22, 2025· Updated Apr 15, 2026

CVE-2024-42012

Description

GRAU DATA Blocky before 3.1 stores passwords encrypted rather than hashed. At the login screen, the user's password is compared to the user's decrypted cleartext password. An attacker with Windows admin or debugging rights can therefore steal the user's Blocky password and from there impersonate that local user.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

GRAU DATA/Blockyllm-create
Range: <3.1

Patches

Vulnerability mechanics

References

www.blockyforveeam.com/en/security-bulletin-2024-06-25/nvd
www.graudata.com/en/products/protection-against-ransomware/blocky-for-veeam/nvd

News mentions

No linked articles in our index yet.

cvss	0.371
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000