PT-2024-21246 · Unknown · Oet-213H-Bts1

Published 2024-03-01 · Updated 2024-11-04 · CVE-2024-25972

Positive Technologies (AI Summary)

CVSS v3.1

8.3

High

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L

Name of the Vulnerable Software and Affected Versions OET-213H-BTS1 (affected versions not specified)

Description The issue concerns an insecure default vulnerability in the initialization of a resource. This allows a network-adjacent unauthenticated attacker to configure and control the affected product.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1188

Related Identifiers

CVE-2024-25972

Affected Products

Oet-213H-Bts1

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-25972 · Security Note
• https://t.me/cvenotify/100577 · Telegram Post
• https://atsumi.co.jp/info-20240229.html · Note
• https://t.me/cvenotify/72753 · Telegram Post
• https://jvn.jp/en/jp/JVN77203800 · Note
• https://atsumi.co.jp/pdf/oet-213h-bts1.pdf · Note