Description

The password is empty in the initial configuration of ACERA 9010-08 firmware v02.04 and earlier, and ACERA 9010-24 firmware v02.04 and earlier. An unauthenticated attacker may log in to the product with no password, and obtain and/or alter information such as network configuration and user information. The products are affected only when running in non MS mode with the initial configuration.

INFO

Published Date :

2024-04-08T00:16:21.116Z

Last Modified :

2024-08-02T00:56:58.148Z

Source :

jpcert
AFFECTED PRODUCTS

The following products are affected by CVE-2024-28744 vulnerability.

Vendors Products
Furunosystems
  • Acera 9010-08 Firmware
  • Acera 9010-24 Firmware
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-28744.

URL Resource
https://jvn.jp/en/vu/JVNVU99285099/ cve-icon cve-icon
https://www.furunosystems.co.jp/news/info/vulner20240401.html cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact