CVE-2024-28812

An issue was discovered in Infinera hiT 7300 5.60.50. A hidden SSH service (on the local management network interface) with hardcoded credentials allows attackers to access the appliance operating system (with highest privileges) via an SSH connection.

Score

CVSS 3.1 8.8 High

Status

Analyzed - cve@mitre.org

Published

2024-09-30

Last modified

2024-09-30

Weaknesses

CWE-798

Affected products

• Hit 7300 (Infinera)
• Hit 7300 Firmware (Nokia)

References

• https://www.cvcn.gov.it/cvcn/cve/CVE-2024-28812