CVE-2024-29071

2024-03-2503:42:31

jpcert

github.com

hgw bl1500hm

weak credentials

unauthenticated attacker

system settings

cve-2024-29071

AI Score

Confidence

Low

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated attacker may change the system settings.

References

jvn.jp/en/vu/JVNVU93546510/

www.au.com/support/service/internet/guide/modem/bl1500hm/firmware/