CVE-2024-21865: Kddi Corporation Hgw BL1500HM

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated attacker may connect to the product via SSH and use a shell.

Affected products

• Kddi Corporation Hgw BL1500HM: up to and including 002.001.013

Published 2024-03-25. Last modified 2026-06-17.