CVE-2020-35755

An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a luciservice Read NVRAM Direct Access Information Leak. The luciservice deamon running on port 7777 provides a sub-category of commands for which Read is prepended. Commands in this category are able to directly read the...

CVE-2020-35755

CVE-2020-35755 affects Libre Wireless LS9 LS1.5/p7040 devices. The issue is a direct information leak via the luci_service daemon on port 7777, where a Read_ command category enables reading the device configuration NVRAM. This allows access to sensitive data stored in NVRAM, including the Wi‑Fi ...