PT-2019-18654 · Linksys · Linksys Wrt1900Acs

Aaron Weathersby + 1 · Published 2019-06-17 · Updated 2020-08-24 · CVE-2019-7579

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linksys WRT1900ACS version 1.0.3.187766

Description An issue exists where an unauthenticated user can access a confidential file setup.js.localized at the /ui/1.0.99.187766/dynamic/js/ endpoint, allowing an attacker to obtain a list of possible default guest network passwords. This list, combined with a random 2-digit number, can be used to brute force access to the router's guest network.

Recommendations For Linksys WRT1900ACS version 1.0.3.187766, consider restricting access to the /ui/1.0.99.187766/dynamic/js/ endpoint to prevent unauthorized users from accessing the setup.js.localized file until a patch is available. Additionally, changing the default guest network password to a strong, unique password can help mitigate the risk of brute force attacks.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2019-7579

Affected Products

Linksys Wrt1900Acs

References · 4

• 🔥 http://x0rsecurity.com/2019/06/09/my-second-cve-linksys-wrt-acs-cve-2019-7579-or-as-i-call-it-acceptance-no-one-considers-security-by-design · Exploit
• https://osv.dev/vulnerability/CVE-2019-7579 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-7579 · Security Note
• https://robot-security.blogspot.com · Note