PT-2017-18516 · Unknown · Be126 Wifi Repeater

Hay Mizrachi + 1 · Published 2017-09-20 · Updated 2017-09-28 · CVE-2017-8770

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions BE126 WIFI repeater version 1.0

Description The issue allows attackers to read the entire filesystem on the device. This is achieved by using a crafted getpage parameter, enabling local file disclosure (LFD).

Recommendations For BE126 WIFI repeater version 1.0, avoid using the getpage parameter until a fix is available. As a temporary workaround, consider restricting access to the device to minimize the risk of exploitation.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-8770

Affected Products

Be126 Wifi Repeater

References · 3

• 🔥 https://exploit-db.com/exploits/42547 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-8770 · Security Note
• http://digitalwhisper.co.il/files/Zines/0x56/DW86-1-RepeaterHack.pdf · Note