Nokia Hit 7300 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Nokia Hit 7300 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2024-28812 — CVSS 8.8 (high): An issue was discovered in Infinera hiT 7300 5.60.50. A hidden SSH service (on the local management network interface) with hardcoded…
• CVE-2024-28809 — CVSS 8.8 (high): An issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive password in firmware update packages allows attackers…
• CVE-2024-28813 — CVSS 8.4 (high): An issue was discovered in Infinera hiT 7300 5.60.50. Undocumented privileged functions in the @CT management application allow an attacker…
• CVE-2024-28810 — CVSS 6.6 (medium): An issue was discovered in Infinera hiT 7300 5.60.50. Sensitive information inside diagnostic files (exported by the @CT application)…
• CVE-2024-28807 — CVSS 6.5 (medium): An issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive information in the memory of the @CT desktop…
• CVE-2024-28811 — CVSS 3.3 (low): An issue was discovered in Infinera hiT 7300 5.60.50. A web application allows a remote privileged attacker to execute applications…
• CVE-2024-28808 — CVSS 2.7 (low): An issue was discovered in Infinera hiT 7300 5.60.50. Hidden functionality in the web interface allows a remote authenticated attacker to…