CVE-2019-7579

CVE-2019-7579 affects Linksys WRT1900ACS devices (1.0.3.187766). An unauthenticated user can access a confidential file on the router’s webserver (ui/1.0.99.187766/dynamic/js/setup.js.localized), enabling enumeration of default guest network passwords. An attacker can use this 30-word list plus a...