PT-2018-12984 · Kraftway · Kraftway 24F2Xg Router

Alexander Nochvay · Published 2018-08-17 · Updated 2019-10-03 · CVE-2018-15350

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Kraftway 24F2XG Router firmware version 3.5.30.1118

Description The issue allows remote attackers to gain privileged access to the router due to default credentials.

Recommendations For firmware version 3.5.30.1118, change the default credentials to prevent unauthorized access.

Fix

Weakness Enumeration

CWE-1188

Related Identifiers

CVE-2018-15350

Affected Products

Kraftway 24F2Xg Router

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-15350 · Security Note
• https://osv.dev/vulnerability/CVE-2018-15350 · Vendor Advisory
• https://ics-cert.kaspersky.com/advisories/klcert-advisories/2018/08/17/klcert-18-006-kraftway-24f2xg-router-default-credentials · Note