What’s Vulnerable › Vulnerabilities

CVE-2024-39345

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-07-24 · updated 2026-06-17
• Weakness: CWE-78

Description

AdTran 834-5 HDC17600021F1 (SmartOS 11.1.1.1) devices enable the SSH service by default and have a hidden, undocumented, hard-coded support account whose password is based on the devices MAC address. All of the devices internet interfaces share a similar MAC address that only varies in their final octet. This allows network-adjacent attackers to derive the support user's SSH password by decrementing the final octet of the connected gateway address or via the BSSID. An attacker can then execute arbitrary OS commands with root-level privileges. NOTE: The vendor states that there is no intended functionality allowing an attacker to execute arbitrary OS Commands with root-level privileges. The vendor also states that this issue was fixed in SmartOS 12.5.5.1.

Affected products

• Adtran Sdg Smartos: before 12.1.3.1 — fixed in 12.1.3.1

How to fix

Upgrade to a fixed version: Adtran Sdg Smartos 12.1.3.1. Check the vendor advisory for mitigations.

References

• https://github.com/actuator/cve/blob/main/AdTran/CVE-2024-39345
• https://github.com/actuator/cve/blob/main/AdTran/TBA
• https://supportcommunity.adtran.com/t5/Security-Advisories/ADTSA-2024001-Multiple-vulnerabilities-in-Service-Delivery-Gateway-products/ta-p/39332
• https://github.com/actuator/cve/blob/main/AdTran/CVE-2024-39345
• https://github.com/actuator/cve/blob/main/AdTran/TBA

Get alerted when CVE-2024-39345 or the next vulnerability affects your stack