CVE-2024-28093: High severity Adtran NetVanta 3120 vulnerability
Published Mar 26, 2024
·Updated
UNSUPPORTED WHEN ASSIGNED The TELNET service of AdTran NetVanta 3120 18.01.01.00.E devices is enabled by default, and has default credentials for a root-level account.
Affected Software
1 affected component
Adtran NetVanta 3120
Event History
Mar 26, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-28093?
CVE-2024-28093 is classified as a high severity vulnerability due to the exposure of default credentials for root access.
2
How do I fix CVE-2024-28093?
To fix CVE-2024-28093, change the default credentials of the TELNET service and disable TELNET if not needed.
3
Which devices are affected by CVE-2024-28093?
CVE-2024-28093 affects AdTran NetVanta 3120 devices running firmware version 18.01.01.00.E.
4
What type of vulnerability is CVE-2024-28093?
CVE-2024-28093 is a credential management vulnerability related to default account settings in devices.
5
Is the TELNET service secure in CVE-2024-28093?
No, the TELNET service is not secure in CVE-2024-28093 due to its default enabled state and the use of default credentials.