CVE-2024-28093

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-28093
**UNSUPPORTED WHEN ASSIGNED** The TELNET service of AdTran NetVanta 3120 18.01.01.00.E devices is enabled by default, and has default credentials for a root-level account.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/actuator/cve/blob/main/AdTran/CVE-2024-28093
https://github.com/actuator/cve/blob/main/AdTran/CWE-287
https://supportcommunity.adtran.com/t5/NetVanta-Product-Notices/2019-Q2-NetVanta-3120-3130-EOL/ta-p/35715
Configurations

No configuration.

History

04 Sep 2024, 17:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 8.8
CWE CWE-1392

26 Jul 2024, 21:15

Type Values Removed Values Added
References
  • () https://supportcommunity.adtran.com/t5/NetVanta-Product-Notices/2019-Q2-NetVanta-3120-3130-EOL/ta-p/35715 -
Summary
  • (es) El servicio TELNET de los dispositivos AdTran NetVanta 3120 18.01.01.00.E está habilitado de forma predeterminada y tiene credenciales predeterminadas para una cuenta de nivel raíz.
Summary (en) The TELNET service of AdTran NetVanta 3120 18.01.01.00.E devices is enabled by default, and has default credentials for a root-level account. (en) **UNSUPPORTED WHEN ASSIGNED** The TELNET service of AdTran NetVanta 3120 18.01.01.00.E devices is enabled by default, and has default credentials for a root-level account.

26 Mar 2024, 12:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-03-26 12:15

Updated : 2024-09-04 17:35

NVD link : CVE-2024-28093

Mitre link : CVE-2024-28093

CVE.ORG link : CVE-2024-28093

JSON object : View

Products Affected

No product.

CWE
CWE-1392