CVE-2019-13140

CVE-2019-13140

Inteno EG200 EG200-WU7P1U_ADAMO3.16.4-190226_1650 routers have a JUCI ACL misconfiguration that allows the "user" account to extract the 3DES key via JSON commands to ubus. The 3DES key is used to decrypt the provisioning file provided by Adamo Telecom on a public URL via cleartext HTTP.

Source: CVE-2019-13140

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다