PT-2021-11848 · Unknown · Libre Wireless Ls9 Ls1.5/P7040

Published 2021-05-03 · Updated 2022-07-12 · CVE-2020-35756

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Libre Wireless LS9 LS1.5/p7040 devices (affected versions not specified)

Description: An issue was discovered where the luci service daemon running on port 7777 does not require authentication to return the device configuration password in cleartext when using the GETPASS command. This allows any unauthenticated person with access to port 7777 on the device to leak the user's personal device configuration password by issuing the GETPASS command.

Recommendations: As a temporary workaround, consider restricting access to port 7777 to minimize the risk of exploitation. Avoid using the GETPASS command in the luci service daemon until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2020-35756

Affected Products

Libre Wireless Ls9 Ls1.5/P7040

References · 4

• 🔥 https://iot-inspector.com/blog/advisory-multiple-issues-libre-wireless-ls9 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-35756 · Security Note
• https://osv.dev/vulnerability/CVE-2020-35756 · Vendor Advisory
• https://t.me/cvenotify/13969 · Telegram Post