PT-2017-18516 · Unknown · Be126 Wifi Repeater

Hay Mizrachi + 1 · Publicado 2017-09-20 · Atualizado 2017-09-28 · CVE-2017-8770

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions BE126 WIFI repeater version 1.0

Description The issue allows attackers to read the entire filesystem on the device. This is achieved by using a crafted getpage parameter, enabling local file disclosure (LFD).

Recommendations For BE126 WIFI repeater version 1.0, avoid using the getpage parameter until a fix is available. As a temporary workaround, consider restricting access to the device to minimize the risk of exploitation.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-8770

Produtos afetados

Be126 Wifi Repeater

Referências · 3

• 🔥 https://exploit-db.com/exploits/42547 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-8770 · Nota de Segurança
• http://digitalwhisper.co.il/files/Zines/0x56/DW86-1-RepeaterHack.pdf · Nota