CVE-2024-25972

2024-03-0109:31:16

jpcert

www.cve.org

cve-2024-25972

atsumi electric co.

japan

network-adjacent attacker

unauthenticated

remote control

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

15.7%

JSON

Initialization of a resource with an insecure default vulnerability in OET-213H-BTS1 sold in Japan by Atsumi Electric Co., Ltd. allows a network-adjacent unauthenticated attacker to configure and control the affected product.

CNA Affected

[
  {
    "vendor": "Zhejiang Uniview Technologies Co.,Ltd and Atsumi Electric Co., Ltd.",
    "product": "OET-213H-BTS1",
    "versions": [
      {
        "version": "all firmware versions",
        "status": "affected"
      }
    ]
  }
]