CVE-2024-31970

{"id": "CVE-2024-31970", "cveTags": [{"tags": ["disputed"], "sourceIdentifier": "cve@mitre.org"}], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.2}]}, "published": "2024-07-24T16:15:06.600", "references": [{"url": "https://github.com/actuator/cve/blob/main/AdTran/CVE-2024-31970", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/actuator/cve/blob/main/AdTran/SRG-834-5", "tags": ["Broken Link"], "source": "cve@mitre.org"}, {"url": "https://supportcommunity.adtran.com/t5/Security-Advisories/ADTSA-2024001-Multiple-vulnerabilities-in-Service-Delivery-Gateway-products/ta-p/39332", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "AdTran SRG 834-5 HDC17600021F1 devices (with SmartOS 11.1.1.1 and fixed in Version 12.1.3.1) have SSH enabled by default, accessible both over the LAN and the Internet. During a window of time when the device is being set up, it uses a default username and password combination of admin/admin with root-level privileges. An attacker can exploit this window to gain unauthorized root access by either modifying the existing admin account or creating a new account with equivalent privileges. This vulnerability allows attackers to execute arbitrary commands. NOTE: The vendor has disputed this, finding the report not applicable. According to AdTran, SSH has never been accessible (from WAN) on SmartOS official builds. Furthermore, the vendor adds that test build 11.1.0.101-202106231430 was never released to end users."}, {"lang": "es", "value": "Los dispositivos AdTran SRG 834-5 HDC17600021F1 (con SmartOS 11.1.1.1 y corregido en la versi\u00f3n 12.1.3.1) tienen SSH habilitado de forma predeterminada, accesible tanto a trav\u00e9s de LAN como de Internet. Durante un per\u00edodo de tiempo en el que se est\u00e1 configurando el dispositivo, utiliza una combinaci\u00f3n predeterminada de nombre de usuario y contrase\u00f1a de administrador/admin con privilegios de nivel root. Un atacante puede aprovechar esta ventana para obtener acceso root no autorizado modificando la cuenta de administrador existente o creando una nueva cuenta con privilegios equivalentes. Esta vulnerabilidad permite a los atacantes ejecutar comandos arbitrarios."}], "lastModified": "2024-09-03T21:15:15.603", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:adtran:sdg_smartos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CD1A4E83-2A74-459B-A681-2109BC8EEF60", "versionEndExcluding": "12.1.3.1"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:adtran:834-5:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "9C1207CF-E200-4642-9961-C866D07CF9FE"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}