CVE-2024-28809

An issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive password in firmware update packages allows attackers to access various appliance services via hardcoded credentials.

Score

CVSS 3.1 8.8 High

Status

Analyzed - cve@mitre.org

Published

2024-09-30

Last modified

2024-09-30

Weaknesses

CWE-312, CWE-798

Affected products

• Hit 7300 (Infinera)
• Hit 7300 Firmware (Nokia)

References

• https://www.cvcn.gov.it/cvcn/cve/CVE-2024-28809