CVE-2024-28093 - Vulnerability Details - OpenCVE

ReportizFlow

The TELNET service of AdTran NetVanta 3120 18.01.01.00.E devices is enabled by default, and has default credentials for a root-level account.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Adtran	Netvanta 3120 Firmware

No data.

No data.

References

Link	Providers
https://github.com/actuator/cve/blob/main/AdTran/CVE-2024-28093
https://github.com/actuator/cve/blob/main/AdTran/CWE-287
https://supportcommunity.adtran.com/t5/NetVanta-Product-Notices/2019-Q2-NetVanta-3120-3130-EOL/ta-p/35715

History

Mon, 28 Oct 2024 21:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Adtran Adtran netvanta 3120 Firmware
CPEs		cpe:2.3:o:adtran:netvanta_3120_firmware::::::::
Vendors & Products		Adtran Adtran netvanta 3120 Firmware
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Mon, 28 Oct 2024 21:00:00 +0000

Type	Values Removed	Values Added
Description	UNSUPPORTED WHEN ASSIGNED The TELNET service of AdTran NetVanta 3120 18.01.01.00.E devices is enabled by default, and has default credentials for a root-level account.	The TELNET service of AdTran NetVanta 3120 18.01.01.00.E devices is enabled by default, and has default credentials for a root-level account.

Wed, 04 Sep 2024 18:00:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-1392
Metrics		cvssV3_1 `{'score': 8.8, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-03-26T00:00:00

Updated: 2024-10-28T20:43:20.165247

Reserved: 2024-03-04T00:00:00

Link: CVE-2024-28093

Vulnrichment

Updated: 2024-08-02T00:48:48.921Z

NVD

Status : Awaiting Analysis

Published: 2024-03-26T12:15:50.293

Modified: 2024-11-21T09:05:47.803

Link: CVE-2024-28093

Redhat

No data.

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2024-28093", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-10-28T20:43:20.165247", "dateReserved": "2024-03-04T00:00:00", "datePublished": "2024-03-26T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-10-28T20:43:20.165247"}, "descriptions": [{"lang": "en", "value": "The TELNET service of AdTran NetVanta 3120 18.01.01.00.E devices is enabled by default, and has default credentials for a root-level account."}], "tags": ["unsupported-when-assigned"], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://github.com/actuator/cve/blob/main/AdTran/CWE-287"}, {"url": "https://github.com/actuator/cve/blob/main/AdTran/CVE-2024-28093"}, {"url": "https://supportcommunity.adtran.com/t5/NetVanta-Product-Notices/2019-Q2-NetVanta-3120-3130-EOL/ta-p/35715"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:48:48.921Z"}, "title": "CVE Program Container", "references": [{"url": "https://github.com/actuator/cve/blob/main/AdTran/CWE-287", "tags": ["x_transferred"]}, {"url": "https://github.com/actuator/cve/blob/main/AdTran/CVE-2024-28093", "tags": ["x_transferred"]}, {"url": "https://supportcommunity.adtran.com/t5/NetVanta-Product-Notices/2019-Q2-NetVanta-3120-3130-EOL/ta-p/35715", "tags": ["x_transferred"]}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-1392", "lang": "en", "description": "CWE-1392 Use of Default Credentials"}]}], "affected": [{"vendor": "adtran", "product": "netvanta_3120_firmware", "cpes": ["cpe:2.3:o:adtran:netvanta_3120_firmware:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "18.01.01.00.e", "status": "affected"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-09-04T16:25:28.737141Z", "id": "CVE-2024-28093", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-04T16:34:11.488Z"}}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/actuator/cve/blob/main/AdTran/CWE-287", "tags": ["x_transferred"]}, {"url": "https://github.com/actuator/cve/blob/main/AdTran/CVE-2024-28093", "tags": ["x_transferred"]}, {"url": "https://supportcommunity.adtran.com/t5/NetVanta-Product-Notices/2019-Q2-NetVanta-3120-3130-EOL/ta-p/35715", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T00:48:48.921Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-28093", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-09-04T16:25:28.737141Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:adtran:netvanta_3120_firmware:*:*:*:*:*:*:*:*"], "vendor": "adtran", "product": "netvanta_3120_firmware", "versions": [{"status": "affected", "version": "18.01.01.00.e"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-1392", "description": "CWE-1392 Use of Default Credentials"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-16T19:35:12.331Z"}}], "cna": {"tags": ["unsupported-when-assigned"], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://github.com/actuator/cve/blob/main/AdTran/CWE-287"}, {"url": "https://github.com/actuator/cve/blob/main/AdTran/CVE-2024-28093"}, {"url": "https://supportcommunity.adtran.com/t5/NetVanta-Product-Notices/2019-Q2-NetVanta-3120-3130-EOL/ta-p/35715"}], "descriptions": [{"lang": "en", "value": "The TELNET service of AdTran NetVanta 3120 18.01.01.00.E devices is enabled by default, and has default credentials for a root-level account."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-10-28T20:43:20.165247"}}}, "cveMetadata": {"cveId": "CVE-2024-28093", "state": "PUBLISHED", "dateUpdated": "2024-10-28T20:43:20.165247", "dateReserved": "2024-03-04T00:00:00", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2024-03-26T00:00:00", "assignerShortName": "mitre"}, "dataVersion": "5.1"}