CVE-2024-28807

—

CVSS 3.1

6.5 medium

EPSS

<1%p2

Published

Sep 30, 2024 (Sep 30, 2024)

Modified

Jun 17, 2026

Description

An issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive information in the memory of the @CT desktop management application allows guest OS administrators to obtain various users' passwords by accessing memory dumps of the desktop application.

Vendors: nokia
Products: hit 7300 firmware
Weakness: CWE-312
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.