CVE-2024-31970 Hardcoded credentials in n/a
Attackers can gain root access via default admin credentials during device setup, enabling arbitrary command execution on AdTran SRG routers.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-31970?
CVE-2024-31970 is a high-severity vulnerability in n/a, published on 24 Jul 2024. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
AdTran SRG 834-5 HDC17600021F1 devices (with SmartOS 11.1.1.1 and fixed in Version 12.1.3.1) have SSH enabled by default, accessible both over the LAN and the Internet. During a window of time when the device is being set up, it uses a default username and password combination of admin/admin with root-level privileges. An attacker can exploit this window to gain unauthorized root access by either modifying the existing admin account or creating a new account with equivalent privileges. This vulnerability allows attackers to execute arbitrary commands. NOTE: The vendor has disputed this, finding the report not applicable. According to AdTran, SSH has never been accessible (from WAN) on SmartOS official builds. Furthermore, the vendor adds that test build 11.1.0.101-202106231430 was never released to end users.
Weakness: CWE-863
Which versions are affected by CVE-2024-31970?
It affects 1 product.
Products include Adtran Sdg Smartos.
How do I fix CVE-2024-31970?
No fix has been published for CVE-2024-31970 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-31970 being exploited?
There is no known exploitation of CVE-2024-31970 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-2hqg-m6wm-qjm5.