Adtran 834-5 HDC17600021F1 11.1.1.1 SSH Service hard-coded password

Summaryinfo

A vulnerability was found in Adtran 834-5 HDC17600021F1 11.1.1.1. It has been rated as problematic. The affected element is an unknown function of the component SSH Service. This manipulation causes hard-coded password. This vulnerability is tracked as CVE-2024-39345. The attack is only possible within the local network. No exploit exists.

Detailsinfo

A vulnerability classified as critical was found in Adtran 834-5 HDC17600021F1 11.1.1.1. Affected by this vulnerability is an unknown function of the component SSH Service. The manipulation with an unknown input leads to a hard-coded password vulnerability. The CWE definition for the vulnerability is CWE-259. The product contains a hard-coded password, which it uses for its own inbound authentication or for outbound communication to external components. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

AdTran 834-5 HDC17600021F1 (SmartOS 11.1.1.1) devices enable the SSH service by default and have a hidden, undocumented, hard-coded support account whose password is based on the devices MAC address. All of the devices internet interfaces share a similar MAC address that only varies in their final octet. This allows network-adjacent attackers to derive the support user's SSH password by decrementing the final octet of the connected gateway address or via the BSSID. An attacker can then execute arbitrary OS commands with root-level privileges.

The advisory is shared at github.com. This vulnerability is known as CVE-2024-39345 since 06/24/2024. The exploitation appears to be difficult. The attack needs to approached within the local network. The exploitation doesn't need any form of authentication. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1078.001 for this issue.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Vendor

• Adtran

Name

• 834-5 HDC17600021F1

Version

• 11.1.1.1

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion