PT-2024-31980 · Hathway · Hathway Skyworth Router Cm5100-511

Anand Yadav + 1 · Published 2024-11-14 · Updated 2024-11-18 · CVE-2024-46383

Positive Technologies (AI Summary)

CVSS v3.1

2.4

Low

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Hathway Skyworth Router CM5100-511 version 4.1.1.24

Description The issue concerns the storage of sensitive information about connected devices in plaintext. This affects devices connected via USB and Wifi.

Recommendations For version 4.1.1.24, consider restricting access to the device's configuration and connected device information to minimize the risk of sensitive data exposure until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2024-46383

Affected Products

Hathway Skyworth Router Cm5100-511

References · 5

• 🔥 https://github.com/nitinronge91/Sensitive-Information-disclosure-via-SPI-flash-firmware-for-Hathway-router-CVE-2024-46383 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-46383 · Security Note
• https://twitter.com/VulmonFeeds/status/1857053960399470911 · Twitter Post
• http://skyworth.com · Note
• https://twitter.com/CVEnew/status/1857476953835475202 · Twitter Post