CVE-2024-47397

{"id": "CVE-2024-47397", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-47397", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2024-12-18T14:58:36.329686Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "vultures@jpcert.or.jp", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "vultures@jpcert.or.jp", "affectedData": [{"vendor": "FXC Inc.", "product": "AE1021", "versions": [{"status": "affected", "version": "firmware versions 2.0.10 and earlier"}]}, {"vendor": "FXC Inc.", "product": "AE1021PE", "versions": [{"status": "affected", "version": "firmware versions 2.0.10 and earlier"}]}]}], "published": "2024-12-18T07:15:07.847", "references": [{"url": "https://jvn.jp/en/vu/JVNVU91084137/", "source": "vultures@jpcert.or.jp"}, {"url": "https://www.fxc.jp/news/20241213", "source": "vultures@jpcert.or.jp"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "vultures@jpcert.or.jp", "description": [{"lang": "en", "value": "CWE-1390"}]}], "descriptions": [{"lang": "en", "value": "Weak authentication issue exists in AE1021 firmware versions 2.0.10 and earlier and AE1021PE firmware versions 2.0.10 and earlier. If this vulnerability is exploited, the authentication may be bypassed with an undocumented specific string."}, {"lang": "es", "value": "Existe un problema de autenticaci\u00f3n d\u00e9bil en las versiones de firmware 2.0.10 y anteriores de AE1021 y en las versiones de firmware 2.0.10 y anteriores de AE1021PE. Si se explota esta vulnerabilidad, se puede eludir la autenticaci\u00f3n con una cadena espec\u00edfica no documentada."}], "lastModified": "2026-06-17T07:57:01.720", "sourceIdentifier": "vultures@jpcert.or.jp"}