Use of Weak Credentials Exposes BL1500HM to Unauthorized Access
CVE-2024-21865

6.5MEDIUM

Key Information:

Vendor: Kddi Corporation
Status: Hgw Bl1500hm
Vendor: CVE Published:; 25 March 2024

🔔 Create Kddi Corporation Vulnerability Alert

What is CVE-2024-21865?

HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated attacker may connect to the product via SSH and use a shell.

Affected Version(s)

HGW BL1500HM Ver 002.001.013 and earlier

References

https://kddi-tech.com/contents/appendix_L2_06.html#20304f...

https://jvn.jp/en/vu/JVNVU93546510/

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

High

Availability:

None

Attack Vector:

Adjacent Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 25, 2024
Vulnerability Reserved
Mar 18, 2024

CVE-2024-21865 Data

JSON