7 matches found
CVE-2020-29669
In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password. This process has a vulnerability which can be used to take over the administrator account and results in shell access. As the admin user may read the /etc/shadow file, the password...
CVE-2020-29669
In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password. This process has a vulnerability which can be used to take over the administrator account and results in shell access. As the admin user may read the /etc/shadow file, the password...
CVE-2020-29669
In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password. This process has a vulnerability which can be used to take over the administrator account and results in shell access. As the admin user may read the /etc/shadow file, the password...
CVE-2020-29669
This CVE refers to Macally WIFISD2-2A82 (firmware 2.000.010). A vulnerability lets the Guest user reset its own password, enabling takeover of the administrator account and resulting in shell access. The admin user may read /etc/shadow, allowing password hashes (including root) to be dumped; the ...
CVE-2020-29669
In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password. This process has a vulnerability which can be used to take over the administrator account and results in shell access. As the admin user may read the /etc/shadow file, the password...
Macally WIFISD2-2A82 Media and Travel Router Authorization Issues Vulnerability
The Macally WIFISD2-2A82 Media and Travel Router is a convenient multi-function router from Macally USA. Macally WIFISD2-2A82 Media and Travel Router 2.000.010 suffers from an authorization issue vulnerability that stems from a guest user being able to reset their own password. This process has a...
Exploit for Improper Authentication in Macally Wifisd2-2A82_Firmware
PoC exploit for CVE-2020-29669, an arbitrary file upload vulnera...