7 matches found
CVE-2020-29669
Macally WIFISD2-2A82 CVE-2020-29669 の解説 by Maximilian Barz Silky and Daniel Schwendner code-byter ========================== これは、Macally WIFISD2-2A82 トラベルルーター（ファームウェアバージョン 2.000.010）の悪用に関する解説です。ゲストユーザーは自身のパスワードをリセットできます。この処理には脆弱性があり、管理者アカウントを乗っ取り、シェルアクセスを得ることができます。管理者ユーザーは /etc/shadow...
CVE-2020-29669
Macally WIFISD2-2A82 CVE-2020-29669 漏洞分析 by Maximilian Barz Silky and Daniel Schwendner code-byter ========================== 本文是关于利用 Macally WIFISD2-2A82 旅行路由器（固件版本：2.000.010）的漏洞分析。Guest 用户可以重置自己的密码。该过程存在一个漏洞，可被利用来接管管理员账户并获得 shell 访问权限。由于 admin 用户可以读取 /etc/shadow 文件，因此可以导出每个用户（包括 root）的密码哈希。root...
CVE-2020-29669
In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password. This process has a vulnerability which can be used to take over the administrator account and results in shell access. As the admin user may read the /etc/shadow file, the password...
CVE-2020-29669
In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password. This process has a vulnerability which can be used to take over the administrator account and results in shell access. As the admin user may read the /etc/shadow file, the password...
CVE-2020-29669: Improper Authentication
In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password. This process has a vulnerability which can be used to take over the administrator account and results in shell access. As the admin user may read the /etc/shadow file, the password...
Macally WIFISD2-2A82 Media and Travel Router Authorization Issues Vulnerability
The Macally WIFISD2-2A82 Media and Travel Router is a convenient multi-function router from Macally USA. Macally WIFISD2-2A82 Media and Travel Router 2.000.010 suffers from an authorization issue vulnerability that stems from a guest user being able to reset their own password. This process has a...
