CVE-2024-42637 Hardcoded credentials in n/a
Attackers can log in as root using hardcoded credentials in the H3C R3010 router, gaining full administrative control.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-42637?
CVE-2024-42637 is a critical vulnerability in n/a, published on 16 Aug 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
H3C R3010 v100R002L02 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.
Weakness: CWE-798
Which versions are affected by CVE-2024-42637?
It affects 1 product.
Products include H3c R3010 Firmware.
How do I fix CVE-2024-42637?
No fix has been published for CVE-2024-42637 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-42637 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-42637 exists.
Sources
Also known as GHSA-p7f3-v9j2-h27r.