Is CVE-2024-31970 actively exploited?

No active exploitation of CVE-2024-31970 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2024-31970 be exploited remotely?

Yes. CVE-2024-31970 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2024-31970?

CVE-2024-31970 has a CVSS score of 8.8 (HIGH).

HOME VULNERABILITIESCVE-2024-31970

HIGH

CVE-2024-31970

NVD-CWE-noinfoPublished: July 24, 2024· Updated: Jun 17, 2026

8.8

CVSS v3.1

Official Description

AdTran SRG 834-5 HDC17600021F1 devices (with SmartOS 11.1.1.1 and fixed in Version 12.1.3.1) have SSH enabled by default, accessible both over the LAN and the Internet. During a window of time when the device is being set up, it uses a default username and password combination of admin/admin with root-level privileges. An attacker can exploit this window to gain unauthorized root access by either modifying the existing admin account or creating a new account with equivalent privileges. This vulnerability allows attackers to execute arbitrary commands. NOTE: The vendor has disputed this, finding the report not applicable. According to AdTran, SSH has never been accessible (from WAN) on SmartOS official builds. Furthermore, the vendor adds that test build 11.1.0.101-202106231430 was never released to end users.

NVD Source

Technical Analysis

CVE-2024-31970 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 8.8.