CVE-2024-28809

—

CVSS 3.1

8.8 high

EPSS

<1%p7

Published

Sep 30, 2024 (Sep 30, 2024)

Modified

Jun 17, 2026

Description

An issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive password in firmware update packages allows attackers to access various appliance services via hardcoded credentials.

Vendors: nokia
Products: hit 7300 firmware
Weakness: CWE-312, CWE-798
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.