PT-2020-7795 · Unknown · P.Dga4001N

Published 2020-01-14 · Updated 2020-01-24 · CVE-2015-0558

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: P.DGA4001N router with firmware PDG TEF SP 4.06L.6

Description: The issue concerns the generation of the WPA key, which is created using a static value "1236790" and the MAC address.

Recommendations: For the P.DGA4001N router with firmware PDG TEF SP 4.06L.6, consider changing the default settings to use a more secure method of generating the WPA key, such as using a randomly generated passphrase.

Exploit

Fix

Missing Encryption of Sensitive Data

Weakness Enumeration

CWE-311

Related Identifiers

CVE-2015-0558

Affected Products

P.Dga4001N

References · 4

• 🔥 http://packetstormsecurity.com/files/129817/Pirelli-Router-P.DG-A4001N-WPA-Key-Reverse-Engineering.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-0558 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/99682 · Note
• http://exploit-db.com/exploits/35721 · Note