PT-2024-22585 · Infinera · Infinera Hit 7300

Published 2024-09-30 · Updated 2025-05-30 · CVE-2024-28813

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Infinera hiT 7300 version 5.60.50

Description An issue was discovered in the Infinera hiT 7300, where undocumented privileged functions in the @CT management application allow an attacker to activate remote SSH access to the appliance via an unexpected network interface.

Recommendations For Infinera hiT 7300 version 5.60.50, consider disabling the undocumented privileged functions in the @CT management application as a temporary workaround until a patch is available. Restrict access to the @CT management application to minimize the risk of exploitation. Avoid using the undocumented privileged functions in the @CT management application until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2024-28813

Affected Products

Infinera Hit 7300

References · 10

• https://osv.dev/vulnerability/CVE-2024-28813 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-28813 · Security Note
• https://t.me/true_secator/6293 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1840857148894400709 · Twitter Post
• https://cvcn.gov.it/cvcn/cve/CVE-2024-28813 · Note
• https://t.me/true_secator/6267 · Telegram Post
• https://t.me/cvedetector/6680 · Telegram Post
• https://t.me/cvenotify/124152 · Telegram Post
• https://twitter.com/cracbot/status/1842082308658233360 · Twitter Post
• https://twitter.com/CVEnew/status/1840825304333336702 · Twitter Post