PT-2024-28426 · Unknown · Wab-I1750-Ps

Sasabe Tetsuro · Published 2024-08-29 · Updated 2024-09-03 · CVE-2024-39300

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WAB-I1750-PS versions 1.5.10 and earlier

Description A missing authentication vulnerability exists in the Telnet function of the product. When the Telnet function is enabled, a remote attacker may login to the product without authentication and alter the product's settings. This allows attackers to fully compromise devices. As a mitigation measure, applying restrictive firewall rules can help minimize the risk of exploitation.

Recommendations For WAB-I1750-PS versions 1.5.10 and earlier, urgently apply restrictive firewall rules to mitigate the risk until a patch is available. Consider disabling the Telnet function as a temporary workaround until the issue is resolved.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2024-39300

Affected Products

Wab-I1750-Ps

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2024-39300 · Security Note
• https://elecom.co.jp/news/security/20240827-01 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-39300 · Vendor Advisory
• https://t.me/cvedetector/4507 · Telegram Post
• https://jvn.jp/en/jp/JVN24885537 · Note
• https://t.me/cvenotify/93059 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1829468085222269424 · Twitter Post
• https://twitter.com/oktsec/status/1829447531413061642 · Twitter Post
• https://twitter.com/CVEnew/status/1829409682076664226 · Twitter Post
• https://t.me/cvenotify/92856 · Telegram Post
• https://t.me/cvenotify/92781 · Telegram Post