CVE-2020-29669

CVE-2020-29669

In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password. This process has a vulnerability which can be used to take over the administrator account and results in shell access. As the admin user may read the /etc/shadow file, the password hashes of each user (including root) can be dumped. The root hash can be cracked easily which results in a complete system compromise.

Source: CVE-2020-29669

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다