Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2884▼ 177 respecto a la semana anterior
Críticas / altas1281▼ 56 respecto a la semana anterior
Nueva explotación activa (KEV)5▼ 3 respecto a la semana anterior
Sin puntuar (sin CVSS)487▼ 22 respecto a la semana anterior
3 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.8) | 0.61% | — | Adtran SDG Smartos | 24/7/2024 | 17/6/2026 | AdTran SRG 834-5 HDC17600021F1 devices (with SmartOS 11.1.1.1 and fixed in Version 12.1.3.1) have SSH enabled by default, accessible both over the LAN and the Internet. During a window of time when the device is being set up, it uses a default username and password combination of admin/admin with root-level… | |
| Modificada | Alta (7.2) | 0.53% | — | Adtran SDG Smartos | 24/7/2024 | 17/6/2026 | AdTran 834-5 HDC17600021F1 (SmartOS 11.1.1.1) devices enable the SSH service by default and have a hidden, undocumented, hard-coded support account whose password is based on the devices MAC address. All of the devices internet interfaces share a similar MAC address that only varies in their final octet. This allows… | |
| Modificada | Alta (8.8) | 1.7% | — | Adtran SDG SmartosAdtran 834-5 Firmware | 24/7/2024 | 17/6/2026 | Adtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.6.3.1, devices allow OS Command Injection via shell metacharacters to the Ping or Traceroute utility. |