CVE-2024-31970

2024-07-2400:00:00

mitre

github.com

adtran

ssh

default credentials

vulnerability

unauthorized access

arbitrary commands

AI Score

9.2

Confidence

High

EPSS

0.001

Percentile

28.6%

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

AdTran SRG 834-5 HDC17600021F1 devices (with SmartOS 11.1.1.1 and fixed in Version 12.1.3.1) have SSH enabled by default, accessible both over the LAN and the Internet. During a window of time when the device is being set up, it uses a default username and password combination of admin/admin with root-level privileges. An attacker can exploit this window to gain unauthorized root access by either modifying the existing admin account or creating a new account with equivalent privileges. This vulnerability allows attackers to execute arbitrary commands. NOTE: The vendor has disputed this, finding the report not applicable. According to AdTran, SSH has never been accessible (from WAN) on SmartOS official builds. Furthermore, the vendor adds that test build 11.1.0.101-202106231430 was never released to end users.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:adtran:834-5_firmware:*:*:*:*:*:*:*:*"
    ],
    "vendor": "adtran",
    "product": "834-5_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "11.1.1.1",
        "lessThan": "12.1.3.1",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]