Hit 7300 Firmware vulnerabilities
3 known vulnerabilities in Hit 7300 Firmware from Nokia. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.4 High severity
hit_7300: Improper Privilege Management
An issue was discovered in Infinera hiT 7300 5.60.50. Undocumented privileged functions in the @CT management application allow an attacker to activate remote SSH access to the appliance via an unexpected network interface.
- 8.8 High severity
hit_7300: Use of Hard-coded Credentials
An issue was discovered in Infinera hiT 7300 5.60.50. A hidden SSH service (on the local management network interface) with hardcoded credentials allows attackers to access the appliance operating system (with highest privileges) via an SSH connection.
- 8.8 High severity
hit_7300: Cleartext Storage of Sensitive Information
An issue was discovered in Infinera hiT 7300 5.60.50. Cleartext storage of sensitive password in firmware update packages allows attackers to access various appliance services via hardcoded credentials.