Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2024-28744

Quick assessment

Affected
FURUNO SYSTEMS Co.,Ltd. ACERA 9010-08
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

FURUNO ACERA是日本FURUNO公司的一系列交换机。 FURUNO ACERA 9010 v02.04 及之前固件版本、ACERA 9010-24 v02.04 及之前固件版本存在安全漏洞，该漏洞源于未经身份验证的攻击者无需密码即可登录产品，并获取或更改网络配置和用户信息等信息。

AI Predicted 7.5 Difficulty: Trivial EPSS 0.30% · P21

Possible ATT&CK Techniques 1 AI

T1078 · Valid Accounts
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-28744

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The password is empty in the initial configuration of ACERA 9010-08 firmware v02.04 and earlier, and ACERA 9010-24 firmware v02.04 and earlier. An unauthenticated attacker may log in to the product with no password, and obtain and/or alter information such as network configuration and user information. The products are affected only when running in non MS mode with the initial configuration.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
FURUNO ACERA 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
FURUNO ACERA是日本FURUNO公司的一系列交换机。 FURUNO ACERA 9010 v02.04 及之前固件版本、ACERA 9010-24 v02.04 及之前固件版本存在安全漏洞，该漏洞源于未经身份验证的攻击者无需密码即可登录产品，并获取或更改网络配置和用户信息等信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
FURUNO SYSTEMS Co.,Ltd. ACERA 9010-08 firmware v02.04 and earlier -
FURUNO SYSTEMS Co.,Ltd. ACERA 9010-24 firmware v02.04 and earlier -

II. Public POCs for CVE-2024-28744

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2024-28744

请登录查看更多情报信息。

Vendor Advisories for CVE-2024-28744 (1)

Other References for CVE-2024-28744 (1)

IV. Related Vulnerabilities

Same vendor: FURUNO SYSTEMS Co.,Ltd.

V. Comments for CVE-2024-28744

No comments yet

Leave a comment