CVE-2024-28809

An issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive password in firmware update packages allows attackers to access various appliance services via hardcoded credentials.
CVSS

No CVSS.

References
Link Resource
https://www.cvcn.gov.it/cvcn/cve/CVE-2024-28809 Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:nokia:hit_7300_firmware:5.60.50:*:*:*:*:*:*:*
cpe:2.3:h:nokia:hit_7300:-:*:*:*:*:*:*:*

History

30 May 2025, 14:50

Type Values Removed Values Added
CPE cpe:2.3:h:nokia:hit_7300:-:*:*:*:*:*:*:*
cpe:2.3:o:nokia:hit_7300_firmware:5.60.50:*:*:*:*:*:*:*
First Time Nokia hit 7300 Firmware
Nokia
Nokia hit 7300
References () https://www.cvcn.gov.it/cvcn/cve/CVE-2024-28809 - () https://www.cvcn.gov.it/cvcn/cve/CVE-2024-28809 - Third Party Advisory

30 Sep 2024, 18:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-09-30 18:15

Updated : 2025-05-30 14:50


NVD link : CVE-2024-28809

Mitre link : CVE-2024-28809


JSON object : View

Products Affected

nokia

  • hit_7300
  • hit_7300_firmware
CWE

No CWE.