PT-2024-22580 · Infinera · Infinera Hit 7300

Published 2024-09-30 · Updated 2024-11-06 · CVE-2024-28808

Positive Technologies (AI Summary)

CVSS v3.1

2.7

Low

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Infinera hiT 7300 version 5.60.50

Description An issue was discovered in the web interface of the affected software, which contains hidden functionality. This allows a remote authenticated attacker to access reserved information by accessing undocumented web applications.

Recommendations For Infinera hiT 7300 version 5.60.50, consider restricting access to the web interface until a fix is available. As a temporary workaround, limit the use of undocumented web applications to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Insecure Storage of Sensitive Information

Weakness Enumeration

CWE-922

Related Identifiers

CVE-2024-28808

Affected Products

Infinera Hit 7300

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-28808 · Security Note
• https://osv.dev/vulnerability/CVE-2024-28808 · Vendor Advisory
• https://t.me/cvedetector/6685 · Telegram Post
• https://cvcn.gov.it/cvcn/cve/CVE-2024-28808 · Note
• https://twitter.com/CVEnew/status/1840854002763698526 · Twitter Post