CVE-2024-28744 - CVE House
Back to Database
Status published Unknown CVE-2024-28744

The password is empty in the initial configuration of ACERA...

Vulnerability Description

The password is empty in the initial configuration of ACERA 9010-08 firmware v02.04 and earlier, and ACERA 9010-24 firmware v02.04 and earlier. An unauthenticated attacker may log in to the product with no password, and obtain and/or alter information such as network configuration and user information. The products are affected only when running in non MS mode with the initial configuration.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-28744

Credits & Attribution

No credits recorded in the NVD database.

References

More from FURUNO SYSTEMS Co.,Ltd.

View All →
CVE-2023-43627
Path traversal vulnerability in ACERA 1320 firmware ver.01.26 and earlier,...
Unknown 0
CVE-2023-42771
Authentication bypass vulnerability in ACERA 1320 firmware ver.01.26 and earlier,...
Unknown 0
CVE-2023-41086
Cross-site request forgery (CSRF) vulnerability exists in FURUNO SYSTEMS wireless...
Unknown 0
CVE-2023-39429
Cross-site scripting vulnerability in FURUNO SYSTEMS wireless LAN access point...
Unknown 0
CVE-2023-39222
OS command injection vulnerability in FURUNO SYSTEMS wireless LAN access...
Unknown 0

Affected Vendor

FURUNO SYSTEMS Co.,Ltd.

View all reports →

Affected Software

ACERA 9010-08, ACERA 9010-24
Vulnerable Versions:
firmware v02.04 and earlier

Timeline

Official Publish: April 8th, 2024
Last Modified: August 2nd, 2024
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.