Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-28744

The password is empty in the initial configuration of ACERA 9010-08 firmware v02.04 and earlier, and ACERA 9010-24 firmware v02.04 and earlier. An unauthenticated attacker may log

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
jpcert

Description

The password is empty in the initial configuration of ACERA 9010-08 firmware v02.04 and earlier, and ACERA 9010-24 firmware v02.04 and earlier. An unauthenticated attacker may log in to the product with no password, and obtain and/or alter information such as network configuration and user information. The products are affected only when running in non MS mode with the initial configuration.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

FURUNO SYSTEMS Co.,Ltd. ACERA 9010-08

  • firmware v02.04 and earlieraffected

FURUNO SYSTEMS Co.,Ltd. ACERA 9010-24

  • firmware v02.04 and earlieraffected

References