CVE-2024-31970: High severity smartos vulnerability
AdTran SRG 834-5 HDC17600021F1 devices (with SmartOS 11.1.1.1 and fixed in Version 12.1.3.1) have SSH enabled by default, accessible both over the LAN and the Internet. During a window of time when the device is being set up, it uses a default username and password combination of admin/admin with root-level privileges. An attacker can exploit this window to gain unauthorized root access by either modifying the existing admin account or creating a new account with equivalent privileges. This vulnerability allows attackers to execute arbitrary commands. NOTE: The vendor has disputed this, finding the report not applicable. According to AdTran, SSH has never been accessible (from WAN) on SmartOS official builds. Furthermore, the vendor adds that test build 11.1.0.101-202106231430 was never released to end users.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-31970?
CVE-2024-31970 is considered a high severity vulnerability due to the default SSH credentials and accessibility over the Internet.
How do I fix CVE-2024-31970?
To mitigate CVE-2024-31970, update the firmware of the AdTran SRG 834-5 device to version 12.1.3.1 or later.
Which devices are affected by CVE-2024-31970?
CVE-2024-31970 affects AdTran SRG 834-5 devices running SmartOS versions prior to 12.1.3.1.
What default credentials are used in CVE-2024-31970?
CVE-2024-31970 uses the default username and password of admin/admin during the setup process.
Is SSH secure by default in devices affected by CVE-2024-31970?
No, SSH is enabled by default in affected devices, which poses a significant security risk.