CVE-2019-7579

An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. An ability exists for an unauthenticated user to browse a confidential ui/1.0.99.187766/dynamic/js/setup.js.localized file on the router's webserver, allowing for an attacker to identify possible passwords that the system uses to...

PT-2019-18654

Name of the Vulnerable Software and Affected Versions Linksys WRT1900ACS version 1.0.3.187766 Description An issue exists where an unauthenticated user can access a confidential file setup.js.localized at the /ui/1.0.99.187766/dynamic/js/ endpoint, allowing an attacker to obtain a list of possibl...

CVE-2019-7579: Improper Authentication

An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. An ability exists for an unauthenticated user to browse a confidential ui/1.0.99.187766/dynamic/js/setup.js.localized file on the router's webserver, allowing for an attacker to identify possible passwords that the system uses to...