CVE-2021-27372

Realtek xPON RTL9601D SDK 1.9 stores passwords in plaintext which may allow attackers to possibly gain access to the device with root permissions via the build-in network monitoring tool and execute arbitrary commands...

CVE-2021-27372

Realtek xPON RTL9601D SDK 1.9 stores passwords in plaintext in the built‑in network monitoring tool, which may allow an attacker to gain root access to the device and execute arbitrary commands. Affected component: RTL9601D SDK 1.9. Root cause: plaintext password storage. Impact: remote compromis...