What’s Vulnerable › Vulnerabilities

CVE-2024-28812

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-09-30 · updated 2026-06-17
• Weakness: CWE-798

Description

An issue was discovered in Infinera hiT 7300 5.60.50. A hidden SSH service (on the local management network interface) with hardcoded credentials allows attackers to access the appliance operating system (with highest privileges) via an SSH connection.

Affected products

• Nokia Hit 7300 Firmware: 5.60.50

References

• https://www.cvcn.gov.it/cvcn/cve/CVE-2024-28812

Get alerted when CVE-2024-28812 or the next vulnerability affects your stack