CVE-2024-29071

2024-03-2504:15:09

jpcert

web.nvd.nist.gov

hgw bl1500hm

vulnerability

weak credentials

network-adjacent

unauthenticated attacker

system settings change

AI Score

Confidence

Low

EPSS

Percentile

9.0%

JSON

HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated attacker may change the system settings.

Affected configurations

Vulners

Node

kddi_corporationhgw_bl1500hmMatch002.001.013

VendorProductVersionCPE
kddi_corporationhgw_bl1500hm002.001.013cpe:2.3:a:kddi_corporation:hgw_bl1500hm:002.001.013:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
kddi_corporation	hgw_bl1500hm	002.001.013	cpe:2.3:a:kddi_corporation:hgw_bl1500hm:002.001.013:::::::*

CNA Affected

[
  {
    "vendor": "KDDI CORPORATION",
    "product": "HGW BL1500HM",
    "versions": [
      {
        "version": "Ver 002.001.013 and earlier",
        "status": "affected"
      }
    ]
  }
]

References

jvn.jp/en/vu/JVNVU93546510/

www.au.com/support/service/internet/guide/modem/bl1500hm/firmware/