CVE-2024-47397

State: Published
Severity: 7.5 High
Published: Dec 18, 2024
Updated: Dec 18, 2024
Reserved: Dec 10, 2024

Description

Weak authentication issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versions 2.0.10 and earlier. If this vulnerability is exploited, the authentication may be bypassed with an undocumented specific string.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N	jpcert

Weaknesses

CWE-1390 Weak authentication

Affected Products

Product	Versions
AE1021FXC Inc.	firmware versions 2.0.10 and earlierAffected
AE1021PEFXC Inc.	firmware versions 2.0.10 and earlierAffected

References

https://www.fxc.jp/news/20241213
https://jvn.jp/en/vu/JVNVU91084137/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.