Lucene search
+L

8 matches found

Vulnrichment
Vulnrichment
added 2026/07/30 2:59 p.m.11 views

CVE-2026-67596 CSL 1010 M2M 3G WiFi Module 2.2.1.4 Weak Encryption via Router.cfg

CSL 1010 M2M 3G WiFi Module firmware through 2.2.1.4 contains a weak encryption vulnerability that allows unauthenticated attackers to recover all stored secrets in plaintext by reversing a single-byte XOR cipher that uses a static key to obfuscate the configuration backup file. Attackers can...

6.9CVSS5.5AI score0.00108EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2026/07/30 2:59 p.m.8 views

CVE-2026-67596

CSL 1010 M2M 3G WiFi Module firmware through 2.2.1.4 contains a weak encryption vulnerability that allows unauthenticated attackers to recover all stored secrets in plaintext by reversing a single-byte XOR cipher that uses a static key to obfuscate the configuration backup file. Attackers can...

6.9CVSS5.5AI score0.00108EPSS
SaveExploits1References4
CVE
CVE
added 2026/07/30 2:59 p.m.33 views

CVE-2026-67596

CVE-2026-67596 affects the CSL 1010 M2M 3G WiFi Module firmware up to version 2.2.1.4. The vulnerability arises from a weak encryption scheme where a single-byte XOR cipher with a static key is applied to the configuration backup file (Router.cfg). This allows unauthenticated attackers to recover...

6.9CVSS5.5AI score0.00108EPSS
SaveExploits1References3
EUVD
EUVD
added 2026/07/30 2:59 p.m.17 views

EUVD-2026-51157

CSL 1010 M2M 3G WiFi Module firmware through 2.2.1.4 contains a weak encryption vulnerability that allows unauthenticated attackers to recover all stored secrets in plaintext by reversing a single-byte XOR cipher with a static key applied to the configuration backup file. Attackers can trivially...

6.9CVSS5.9AI score0.00108EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/12/23 12:30 a.m.12 views

EUVD-2023-60236

D-Link DSL-124 ME1.00 contains a configuration file disclosure vulnerability that allows unauthenticated attackers to retrieve router settings through a POST request. Attackers can send a specific POST request to the router's configuration endpoint to download a complete backup file containing...

8.8CVSS6.3AI score0.00527EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/12/22 12:0 a.m.10 views

PT-2025-52711

Name of the Vulnerable Software and Affected Versions D-Link DSL-124 ME version 1.00 Description An unauthenticated attacker can retrieve router settings by sending a specific POST request. This allows access to a complete backup file containing sensitive network credentials and system...

8.8CVSS6.8AI score0.00527EPSS
SaveExploits1References9
Kitploit
Kitploit
added 2014/04/14 10:39 p.m.284 views

RouterPassView v1.53 - Recover lost password from router backup file

Most modern routers allow you to backup the configuration of the router into a file, and then restore the configuration from the file when it's needed. The backup file of the router usually contains important data like your ISP user name/password, the login password of the router, and wireless...

7.6AI score
SaveExploits0
Kitploit
Kitploit
added 2014/02/28 1:11 a.m.29 views

[RouterPassView] Recover lost password from router backup file

Most modern routers allow you to backup the configuration of the router into a file, and then restore the configuration from the file when it's needed. The backup file of the router usually contains important data like your ISP user name/password, the login password of the router, and wireless...

7.4AI score
SaveExploits0
Rows per page
Query Builder