CVE-2019-9976

creationtimestamp| type| source ---|---|--- 2024-01-09 18:29:53+00:00| seen| https://t.me/arpsyndicate/2759...

CVE-2019-9976

The CVE-2019-9976 entry documents a vulnerability in the Boa web server used on DASAN H660RM devices running firmware 1.03-0022 where POST data is logged to /tmp/boa-temp. This storage allows logged-in users to read the credentials of administration web interface users, causing a confidentiality ...

DASAN H660RM Information Disclosure / Hardcoded Key Vulnerability

DASAN H660RM allows for unauthenticated ping access, has a hardcoded key for encryption, and logs sensitive information into /tmp. DASAN H660RM Information Disclosure / Hardcoded Key CVE-2019-9974: diagtool.cgi on DASAN H660RM devices with firmware 1.03-0022 allows spawning ping processes without...

DASAN H660RM Information Disclosure / Hardcoded Key

Hi! CVE-2019-9974: diagtool.cgi on DASAN H660RM devices with firmware 1.03-0022 allows spawning ping processes without any authorization leading to information disclosure and DoS attacks Remote attacker could enumerate hosts on LAN interface sending requests to /cgi-bin/diagtool.cgi with ip...