CVE-2024-28811

Published: Sep 30, 2024Modified: Jun 17, 2026

3.3

Vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:L

Exploitability: 0.7 / Impact: 2.5

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

An issue was discovered in Infinera hiT 7300 5.60.50. A web application allows a remote privileged attacker to execute applications contained in a specific OS directory via HTTP invocations.

Affected (1)

Products: Nokia: Hit 7300 Firmware

Nokia

1 product

Hit 7300 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Nokia Hit 7300 Firmware	Version 5.60.50

Running on/with	Platform Versions
Nokia Hit 7300	All versions

Related CWEs

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (1)

https://www.cvcn.gov.it/cvcn/cve/CVE-2024-28811

Source: cve@mitre.org

Third Party Advisory

Timeline

No history available yet.