CVE-2020-29669

This CVE refers to Macally WIFISD2-2A82 (firmware 2.000.010). A vulnerability lets the Guest user reset its own password, enabling takeover of the administrator account and resulting in shell access. The admin user may read /etc/shadow, allowing password hashes (including root) to be dumped; the ...

Macally WIFISD2-2A82 2.000.010 Privilege Escalation

Exploit Title: Macally WIFISD2-2A82 2.000.010 - Guest to Root Privilege Escalation Date: 03.12.2020 Exploit Author: Maximilian Barz and Daniel Schwendner Vendor Homepage: https://us.macally.com/products/wifisd2 Version: 2.000.010 Tested on: Kali Linux 5.7.0-kali1-amd64 CVE : CVE-2020-29669...

Macally WIFISD2-2A82 2.000.010 - Guest to Root Privilege Escalation

Exploit Title: Macally WIFISD2-2A82 2.000.010 - Guest to Root Privilege Escalation Date: 03.12.2020 Exploit Author: Maximilian Barz and Daniel Schwendner Vendor Homepage: https://us.macally.com/products/wifisd2 Version: 2.000.010 Tested on: Kali Linux 5.7.0-kali1-amd64 CVE : CVE-2020-29669...

Exploit for Improper Authentication in Macally Wifisd2-2A82_Firmware

PoC exploit for CVE-2020-29669, an arbitrary file upload vulnera...