CVE-2024-21865 Information

Description

HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated attacker may connect to the product via SSH and use a shell.

Reference

https://www.au.com/support/service/internet/guide/modem/bl1500hm/firmware/ https://jvn.jp/en/vu/JVNVU93546510/