Advantech BB-ERT351 Web Interface Password Disclosure

The vulnerability of the web interface of the Advantech BB-ERT351 network router lies in the absence of a mechanism for masking passwords when they are displayed in the web interface. Exploiting this vulnerability can allow an attacker to disclose passwords from network services such as PPTP and...

Advantech BB-ERT351 Default HTTP Interception

The vulnerability of the microprogrammed network router Advantech BB-ERT351 is related to the default use of the HTTP protocol during the implementation of the “Basic HTTP Authentication” method. Exploiting this vulnerability allows a malicious actor to intercept administrator credentials and oth...

Advantech BB-ERT351 Authentication Information Disclosure

The vulnerability of the microprogrammed network router Advantech BB-ERT351 is related to the lack of restrictions on the number of authentication attempts. Exploiting this vulnerability allows a malicious actor to brute-force the administrator password remotely...

Advantech BB-ERT351 XSS

The vulnerability of the microprogrammed network router Advantech BB-ERT351 is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks using specially crafted URLs...

Advantech BB-ERT351 Cryptographic Algorithm Use

The vulnerability of the microprogrammed network router Advantech BB-ERT351 is related to the use of a unreliable cryptographic algorithm for hashing passwords. Exploiting this vulnerability could allow an attacker, operating remotely, to retrieve the administrator’s password from the hash...

PT-2019-5719

Name of the Vulnerable Software and Affected Versions Advantech BB-ERT351 affected versions not specified Description The issue is related to the use of an insecure cryptographic algorithm for password hashing in the Advantech BB-ERT351 network router's firmware. This could allow a remote attacke...

PT-2019-5720

Name of the Vulnerable Software and Affected Versions Advantech BB-ERT351 affected versions not specified Description The issue is related to the lack of a password masking mechanism in the web interface of the Advantech BB-ERT351 network router's firmware. This could allow an attacker to reveal...