CVE-2020-35755

An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a luciservice Read NVRAM Direct Access Information Leak. The luciservice deamon running on port 7777 provides a sub-category of commands for which Read is prepended. Commands in this category are able to directly read the...

CVE-2020-35755: Missing Authentication for Critical Function

An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a luciservice Read NVRAM Direct Access Information Leak. The luciservice deamon running on port 7777 provides a sub-category of commands for which Read is prepended. Commands in this category are able to directly read the...

PT-2021-11847

Name of the Vulnerable Software and Affected Versions: Libre Wireless LS9 LS1.5/p7040 devices affected versions not specified Description: An issue was discovered that allows direct access to the device configuration NVRAM, which contains sensitive information such as the Wi-Fi password in...

CVE-2020-35756: Missing Authentication for Critical Function

An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a luciservice GETPASS Configuration Password Information Leak. The luciservice daemon running on port 7777 does not require authentication to return the device configuration password in cleartext when using the GETPASS...

PT-2021-11850

Name of the Vulnerable Software and Affected Versions: Libre Wireless LS9 LS1.5/p7040 devices Description: The issue is related to an authentication bypass in the web interface of the affected devices. The web interface does not properly restrict access to internal functionality, allowing direct...