CVE-2024-28809

HIGH

Infinera hiT 7300 5.60.50 - Cleartext Storage of Sensitive Password in Firmware Update Packages

Title source: llm

Description

An issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive password in firmware update packages allows attackers to access various appliance services via hardcoded credentials.

References (1)

Core 1

Core References

Third Party Advisory

https://www.cvcn.gov.it/cvcn/cve/CVE-2024-28809

Scores

CVSS v3 8.8

EPSS 0.0017

EPSS Percentile 6.5%

Attack Vector ADJACENT_NETWORK

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-312 CWE-798

Status published

Products (1)

nokia/hit_7300_firmware 5.60.50

Published Sep 30, 2024

Tracked Since Feb 18, 2026