CVE-2024-28812

An issue was discovered in Infinera hiT 7300 5.60.50. A hidden SSH service (on the local management network interface) with hardcoded credentials allows attackers to access the appliance operating system (with highest privileges) via an SSH connection.
CVSS

No CVSS.

References
Link Resource
https://www.cvcn.gov.it/cvcn/cve/CVE-2024-28812 Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:nokia:hit_7300_firmware:5.60.50:*:*:*:*:*:*:*
cpe:2.3:h:nokia:hit_7300:-:*:*:*:*:*:*:*

History

30 May 2025, 14:50

Type Values Removed Values Added
References () https://www.cvcn.gov.it/cvcn/cve/CVE-2024-28812 - () https://www.cvcn.gov.it/cvcn/cve/CVE-2024-28812 - Third Party Advisory
First Time Nokia hit 7300 Firmware
Nokia
Nokia hit 7300
CPE cpe:2.3:h:nokia:hit_7300:-:*:*:*:*:*:*:*
cpe:2.3:o:nokia:hit_7300_firmware:5.60.50:*:*:*:*:*:*:*

30 Sep 2024, 19:35

Type Values Removed Values Added
New CVE

Information

Published : 2024-09-30 19:15

Updated : 2025-05-30 14:50


NVD link : CVE-2024-28812

Mitre link : CVE-2024-28812


JSON object : View

Products Affected

nokia

  • hit_7300
  • hit_7300_firmware
CWE

No CWE.