7 matches found
CVE-2020-29669
Macally WIFISD2-2A82 关于 CVE-2020-29669 的分析文章 由 Maximilian Barz Silky 和 Daniel Schwendner code-byter 撰写 ========================== 这是一篇关于利用 Macally WIFISD2-2A82 旅行路由器(固件版本:2.000.010)的分析文章。Guest 用户能够重置自己的密码。该过程存在一个漏洞,可用于接管管理员账户,并最终获得 shell 访问权限。由于 admin 用户可以读取 /etc/shadow 文件,因此可以导出每个用户(包括...
CVE-2020-29669
Macally WIFISD2-2A82 CVE-2020-29669 漏洞分析 by Maximilian Barz Silky and Daniel Schwendner code-byter ========================== 本文是关于利用 Macally WIFISD2-2A82 旅行路由器(固件版本:2.000.010)的漏洞分析。Guest 用户可以重置自己的密码。该过程存在一个漏洞,可被利用来接管管理员账户并获得 shell 访问权限。由于 admin 用户可以读取 /etc/shadow 文件,因此可以导出每个用户(包括 root)的密码哈希。root...
CVE-2020-29669
In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password. This process has a vulnerability which can be used to take over the administrator account and results in shell access. As the admin user may read the /etc/shadow file, the password...
CVE-2020-29669
In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password. This process has a vulnerability which can be used to take over the administrator account and results in shell access. As the admin user may read the /etc/shadow file, the password...
CVE-2020-29669: Improper Authentication
In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password. This process has a vulnerability which can be used to take over the administrator account and results in shell access. As the admin user may read the /etc/shadow file, the password...
Macally WIFISD2-2A82 Media and Travel Router Authorization Issues Vulnerability
The Macally WIFISD2-2A82 Media and Travel Router is a convenient multi-function router from Macally USA. Macally WIFISD2-2A82 Media and Travel Router 2.000.010 suffers from an authorization issue vulnerability that stems from a guest user being able to reset their own password. This process has a...