VulnerabilityDeferred

CVE-2024-47397

Weak authentication issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versions 2.0.10 and earlier.

HIGH 7.5EPSS 0.40%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (0.40%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Weak authentication issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versions 2.0.10 and earlier. If this vulnerability is exploited, the authentication may be bypassed with an undocumented specific string.

CVSS 3.1: 7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS: 0.40% probability · 33th percentile
CISA KEV: Not listed
Weakness: CWE-1390
Source: vultures@jpcert.or.jp

References

https://jvn.jp/en/vu/JVNVU91084137/
https://www.fxc.jp/news/20241213

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.