Description:

CVE-2024-47044 affects Home GateWay/Hikari Denwa routers from NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION. It involves insufficient access restrictions for Device Setting pages, allowing attackers with WAN-side IPv6 addresses to access these pages remotely. The SVRS of 42 indicates a moderate risk, highlighting the need for attention and timely mitigation.

Key Insights:

• Insufficient Access Restrictions: The vulnerability stems from weak access controls, enabling unauthorized access to sensitive device settings.
• Remote Exploitation: Attackers can exploit this vulnerability remotely, increasing the risk of compromise for devices connected to the affected routers.
• Limited Impact: The vulnerability only affects routers subscribed and used in NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION areas, reducing its potential impact.

Mitigation Strategies:

• Apply Firmware Updates: Install the latest firmware updates provided by the vendor to address the vulnerability.
• Restrict WAN Access: Configure routers to restrict WAN access to authorized devices and services.
• Enable Firewall Rules: Implement firewall rules to block unauthorized access to Device Setting pages.
• Monitor Network Traffic: Regularly monitor network traffic for suspicious activity and investigate any anomalies.

Additional Information:

• Threat Actors/APT Groups: No specific threat actors or APT groups have been identified as actively exploiting this vulnerability.
• Exploit Status: Active exploits have not been published.
• CISA Warnings: The Cybersecurity and Infrastructure Security Agency (CISA) has not issued a warning for this vulnerability.
• In the Wild: The vulnerability is not known to be actively exploited by hackers.

If users have additional queries regarding this incident, they can use the 'Ask to Analyst' feature, contact SOCRadar directly, or open a support ticket for more information if necessary.