Default Credentials Vulnerability in Kraftway 24F2XG Router
CVE-2018-15350

9.8CRITICAL

Key Information:

Vendor
Kaspersky
Status
Kraftway
Vendor
CVE Published:
17 August 2018

Summary

The Kraftway 24F2XG Router is susceptible to a default credentials vulnerability, allowing remote attackers to gain privileged access to the device. This security flaw can be exploited without authentication, potentially leading to unauthorized control over the router's settings and data. To mitigate the risk, users should immediately change the default credentials and update their firmware to the latest version.

Affected Version(s)

Kraftway Kraftway-24F2XG Router firmware 3.5.30.1118

References

https://ics-cert.kaspersky.com/advisories/klcert-advisori...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.