Filtered by vendor Adtran Subscriptions
Filtered by product Netvanta 3120 Firmware Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-31971 1 Adtran 2 Netvanta 3120, Netvanta 3120 Firmware 2024-11-21 6.1 Medium
Multiple stored cross-site scripting (XSS) vulnerabilities on AdTran NetVanta 3120 18.01.01.00.E devices allow remote attackers to inject arbitrary JavaScript, as demonstrated by /mainPassword.html, /processIdentity.html, /public.html, /dhcp.html, /private.html, /hostname.html, /connectivity.html, /NetworkMonitor.html, /trafficMonitoringConfig.html, and /wizardMain.html.
CVE-2024-28093 1 Adtran 1 Netvanta 3120 Firmware 2024-11-21 8.8 High
The TELNET service of AdTran NetVanta 3120 18.01.01.00.E devices is enabled by default, and has default credentials for a root-level account.