CVE-2024-28809

8.8 highEPSS 0.2%

High (8.8) in nokia hit 7300 firmware. EPSS 0.2% chance of exploitation in the next 30 days.

An issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive password in firmware update packages allows attackers to access various appliance services via hardcoded credentials.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 6% of CVEs (scores of 2026-10-31)
CWEs: CWE-312, CWE-798
Published: 2024-09-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nokia:hit_7300_firmware

References

https://www.cvcn.gov.it/cvcn/cve/CVE-2024-28809

Check your stack JSON