CVE-2017-8771

On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet which is open by default with default credentials as root username:"root" password:"root". The attacker can make a user that is connected to the repeater click on a malicious link that will log into the telnet and will infect the...

CVE-2017-8772

On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet which is open by default with default credentials as root username:"root" password:"root" and can: 1. Read the entire file system; 2. Write to the file system; or 3. Execute any code that attacker desires malicious or not...

CVE-2017-8772

CNVD-2017-35048 confirms a vulnerability in Gongjin Electronics BE126 WIFI repeater (version 1.0) allowing telnet access as root with default credentials, enabling reading the entire filesystem, writing to the filesystem, and executing arbitrary code. The NVD entry for CVE-2017-8772 mirrors these...

CVE-2017-13713

T&W WIFI Repeater BE126 allows remote authenticated users to execute arbitrary code via shell metacharacters in the user parameter to cgi-bin/webupg...

Code injection

T&W WIFI Repeater BE126 allows remote authenticated users to execute arbitrary code via shell metacharacters in the user parameter to cgi-bin/webupg...

CVE-2017-13713

CVE-2017-13713 affects the Gongjin Electronics T&W WIFI Repeater BE126. The issue is a remote code execution vulnerability: remote authenticated users can execute arbitrary code by sending shell metacharacters in the user parameter to cgi-bin/webupg. Public PoC demonstrates HTTP POST with a craft...

CVE-2017-13713

T&W WIFI Repeater BE126 allows remote authenticated users to execute arbitrary code via shell metacharacters in the user parameter to cgi-bin/webupg...

Wireless Repeater BE126 Remote Code Execution

Exploit Title: WIFI Repeater BE126 a Remote Code Execution Date Publish: 09/09/2017 Exploit Authors: Hay Mizrachi, Omer Kaspi Contact: [email protected], [email protected] Vendor Homepage: http://www.twsz.com Category: Webapps Version: 1.0 Tested on: Windows/Ubuntu 16.04 CVE: CVE-2017-13713 1...

Wireless Repeater BE126 - Remote Code Execution

Exploit Title: WIFI Repeater BE126 – Remote Code Execution Date Publish: 09/09/2017 Exploit Authors: Hay Mizrachi, Omer Kaspi Contact: [email protected], [email protected] Vendor Homepage: http://www.twsz.com Category: Webapps Version: 1.0 Tested on: Windows/Ubuntu 16.04 CVE: CVE-2017-13713 1...

Wireless Repeater BE126 - Remote Code Execution

Wireless Repeater BE126 - Remote Code Execution Exploit Title: WIFI Repeater BE126 – Remote Code Execution Date Publish: 09/09/2017 Exploit Authors: Hay Mizrachi, Omer Kaspi Contact: [email protected], [email protected] Vendor Homepage: http://www.twsz.com Category: Webapps Version: 1.0 Teste...

Wireless Repeater BE126 - Local File Inclusion

Wireless Repeater BE126 - Local File Inclusion Exploit Title: WIFI Repeater BE126 – Local File Inclusion Date Publish: 23/08/2017 Exploit Authors: Hay Mizrachi, Omer Kaspi Contact: [email protected], [email protected] Vendor Homepage: http://www.twsz.com Category: Webapps Version: 1.0 Tested...

Wireless Repeater BE126 - Local File Inclusion

Exploit Title: WIFI Repeater BE126 – Local File Inclusion Date Publish: 23/08/2017 Exploit Authors: Hay Mizrachi, Omer Kaspi Contact: [email protected], [email protected] Vendor Homepage: http://www.twsz.com Category: Webapps Version: 1.0 Tested on: Windows/Ubuntu 16.04 CVE: CVE-2017-8770 1 -...