Nokia Hit 7300 vulnerabilities
7 vulnerabilities
Known vulnerabilities in Nokia Hit 7300, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2024-28808nokiahit_7300_firmware
EPSS score0.36%
An issue was discovered in Infinera hiT 7300 5.60.50. Hidden functionality in the web interface allows a remote authenticated attacker to access reserved information by accessing undocumented web applications.CVE-2024-28811nokiahit_7300_firmwareEPSS score0.34%
An issue was discovered in Infinera hiT 7300 5.60.50. A web application allows a remote privileged attacker to execute applications contained in a specific OS directory via HTTP invocations.CVE-2024-28810nokiahit_7300_firmwareEPSS score0.23%
An issue was discovered in Infinera hiT 7300 5.60.50. Sensitive information inside diagnostic files (exported by the @CT application) allows an attacker to achieve loss of confidentiality by analyzing these files.CVE-2024-28807nokiahit_7300_firmwareEPSS score0.11%
An issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive information in the memory of the @CT desktop management application allows guest OS administrators to obtain various users' passwords by accessing memory dumps of the desktop application.CVE-2024-28809nokiahit_7300_firmwareEPSS score0.17%
An issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive password in firmware update packages allows attackers to access various appliance services via hardcoded credentials.CVE-2024-28813nokiahit_7300_firmwareEPSS score0.24%
An issue was discovered in Infinera hiT 7300 5.60.50. Undocumented privileged functions in the @CT management application allow an attacker to activate remote SSH access to the appliance via an unexpected network interface.CVE-2024-28812nokiahit_7300_firmwareEPSS score0.30%
An issue was discovered in Infinera hiT 7300 5.60.50. A hidden SSH service (on the local management network interface) with hardcoded credentials allows attackers to access the appliance operating system (with highest privileges) via an SSH connection.