CVE-2024-39300
LOWELECOM WAB-I1750-PS Firmware < 1.5.10 - Unauthenticated Telnet Access
Title source: llmDescription
Missing authentication vulnerability exists in Telnet function of WAB-I1750-PS v1.5.10 and earlier. When Telnet function of the product is enabled, a remote attacker may login to the product without authentication and alter the product's settings.
References (2)
Core 2
Core References
Third Party Advisory
https://jvn.jp/en/jp/JVN24885537/
Vendor Advisory
https://www.elecom.co.jp/news/security/20240827-01/
Scores
CVSS v3
3.7
EPSS
0.0048
EPSS Percentile
37.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-306
Status
published
Products (1)
elecom/wab-i1750-ps_firmware
< 1.5.10
Published
Aug 30, 2024
Tracked Since
Feb 18, 2026