CVE-2024-25972: High severity Atsumi Electric OET-213H-BTS1 vulnerability

Published Mar 1, 2024

Updated

Initialization of a resource with an insecure default vulnerability in OET-213H-BTS1 sold in Japan by Atsumi Electric Co., Ltd. allows a network-adjacent unauthenticated attacker to configure and control the affected product.

Affected Software

1 affected component

Atsumi Electric OET-213H-BTS1

Event History

Mar 1, 2024

CVE Published

via MITRE·09:31 AM

Data Sourced

via MITRE·09:31 AM

DescriptionWeakness

Data Sourced

via NVD·10:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-25972?

CVE-2024-25972 is classified as a high-severity vulnerability due to its potential for unauthenticated remote exploitation.

How do I fix CVE-2024-25972?

To fix CVE-2024-25972, reconfigure the device settings to enforce secure authentication and avoid using default configurations.

What products are affected by CVE-2024-25972?

CVE-2024-25972 specifically affects the Atsumi Electric OET-213H-BTS1 model.

Who can exploit CVE-2024-25972?

CVE-2024-25972 can be exploited by network-adjacent unauthenticated attackers.

What should I do if I am using the OET-213H-BTS1 with CVE-2024-25972?

If using the OET-213H-BTS1, immediately review and secure your device configurations to mitigate the risks of CVE-2024-25972.