PT-2008-2855 · Linksys · Linksys Wrt54G

Publicado 2008-03-10 · Atualizado 2018-10-11 · CVE-2008-1263

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linksys WRT54G router (affected versions not specified)

Description The issue concerns the storage of passwords and keys in cleartext in the Config.bin file. This might allow remote authenticated users to obtain sensitive information via an HTTP request for the top-level Config.bin URI.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2008-1263

Produtos afetados

Linksys Wrt54G

Referências · 4

• 🔥 http://gnucitizen.org/projects/router-hacking-challenge · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1263 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41115 · Nota
• http://securityfocus.com/archive/1/489009/100/0/threaded · Nota