CVE-2024-54457

Published: Dec 18, 2024Modified: Jun 17, 2026Deferred

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: vultures@jpcert.or.jp (Secondary)

Description

Inclusion of undocumented features or chicken bits issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versions 2.0.10 and earlier, which may allow a logged-in user to enable telnet service.

Related CWEs

CWE-1242

Inclusion of Undocumented Features or Chicken Bits

The device includes chicken bits or undocumented features that can create entry points for unauthorized actors.

References (2)

https://jvn.jp/en/vu/JVNVU91084137/

Source: vultures@jpcert.or.jp

https://www.fxc.jp/news/20241213

Source: vultures@jpcert.or.jp

Timeline

No history available yet.