Default credentials

2023-12-2100:15:00

PRIOn knowledge base

www.prio-n.com

default credentials

remote code execution

sms verification

sensitive information

arbitrary phone hijack

7.8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.5%

JSON

An issue in LTB Self Service Password before v.1.5.4 allows a remote attacker to execute arbitrary code and obtain sensitive information via hijack of the SMS verification code function to arbitrary phone.

CPENameOperatorVersion
self_service_passwordlt1.5.4

CPE	Name	Operator	Version
	self_service_password	lt	1.5.4

References

github.com/ltb-project/self-service-password/issues/816

github.com/piuppi/Proof-of-Concepts/blob/main/ltb-project/README.md