Insecure Default Vulnerability in Atsumi Electric Co., Ltd.'s OET-213H-BTS1 Allows Unauthorized Configuration and Control
CVE-2024-25972

Currently unrated

Key Information:

Vendor: Zhejiang Uniview Technologies Co.,ltd And Atsumi Electric Co., Ltd.
Status: Oet-213h-bts1
Vendor: CVE Published:; 1 March 2024

🔔 Create Zhejiang Uniview Technologies Co.,ltd And Atsumi Electric Co., Ltd. Vulnerability Alert

What is CVE-2024-25972?

Initialization of a resource with an insecure default vulnerability in OET-213H-BTS1 sold in Japan by Atsumi Electric Co., Ltd. allows a network-adjacent unauthenticated attacker to configure and control the affected product.

Affected Version(s)

OET-213H-BTS1 all firmware versions

References

https://www.atsumi.co.jp/info-20240229.html

https://www.atsumi.co.jp/pdf/oet-213h-bts1.pdf

https://jvn.jp/en/jp/JVN77203800/

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 1, 2024
Vulnerability Reserved
Feb 13, 2024

CVE-2024-25972 Data

JSON