CVE-2024-28812

8.8 highEPSS 0.3%

High (8.8) in nokia hit 7300 firmware. EPSS 0.3% chance of exploitation in the next 30 days.

An issue was discovered in Infinera hiT 7300 5.60.50. A hidden SSH service (on the local management network interface) with hardcoded credentials allows attackers to access the appliance operating system (with highest privileges) via an SSH connection.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 22% of CVEs (scores of 2026-10-31)
CWE: CWE-798
Published: 2024-09-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

nokia:hit_7300_firmware

References

https://www.cvcn.gov.it/cvcn/cve/CVE-2024-28812

Check your stack JSON