Default credentials

2020-11-1619:15:00

PRIOn knowledge base

www.prio-n.com

9.7 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.6%

JSON

Airleader Master <= 6.21 devices have default credentials that can be used to access the exposed Tomcat Manager for deployment of a new .war file, with resultant remote code execution.

CPENameOperatorVersion
airleader_master_controlle6.21

CPE	Name	Operator	Version
	airleader_master_control	le	6.21

References

www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-033.txt