9 matches found
CVE-2020-29669
Macally WIFISD2-2A82 CVE-2020-29669 분석 Maximilian Barz Silky 및 Daniel Schwendner code-byter 작성 ========================== 이 문서는 Macally WIFISD2-2A82 여행용 라우터펌웨어 버전: 2.000.010를 익스플로잇하는 방법에 대한 분석입니다. 게스트 사용자는 자신의 비밀번호를 재설정할 수 있습니다. 이 과정에는 관리자 계정을 탈취하고 셸 액세스를 획득할 수 있는 취약점이 존재합니다. 관리자 사용자는 /etc/shadow...
CVE-2020-29669
=============== Macally WIFISD2-2A82 CVE-2020-29669 분석 Maximilian BarzSilky와 Daniel Schwendnercode-byter 작성 ========================== 이 문서는 Macally WIFISD2-2A82 여행용 라우터펌웨어 버전: 2.000.010를 공격하는 방법에 대한 분석입니다. 게스트 사용자는 자신의 비밀번호를 재설정할 수 있습니다. 이 과정에는 관리자 계정을 탈취하고 셸 액세스를 얻는 데 사용될 수 있는 취약점이 있습니다. 관리자 사용...
CVE-2020-29669
In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password. This process has a vulnerability which can be used to take over the administrator account and results in shell access. As the admin user may read the /etc/shadow file, the password...
CVE-2020-29669
In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password. This process has a vulnerability which can be used to take over the administrator account and results in shell access. As the admin user may read the /etc/shadow file, the password...
CVE-2020-29669
In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password. This process has a vulnerability which can be used to take over the administrator account and results in shell access. As the admin user may read the /etc/shadow file, the password...
CVE-2020-29669
In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password. This process has a vulnerability which can be used to take over the administrator account and results in shell access. As the admin user may read the /etc/shadow file, the password...
CVE-2020-29669
This CVE refers to Macally WIFISD2-2A82 (firmware 2.000.010). A vulnerability lets the Guest user reset its own password, enabling takeover of the administrator account and resulting in shell access. The admin user may read /etc/shadow, allowing password hashes (including root) to be dumped; the ...
Macally WIFISD2-2A82 Media and Travel Router Authorization Issues Vulnerability
The Macally WIFISD2-2A82 Media and Travel Router is a convenient multi-function router from Macally USA. Macally WIFISD2-2A82 Media and Travel Router 2.000.010 suffers from an authorization issue vulnerability that stems from a guest user being able to reset their own password. This process has a...
