Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4vrp-pmwp-p4h4

Опубликовано: 23 апр. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 4.9

Описание

BEC Technologies Multiple Routers Cleartext Password Storage Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BEC Technologies routers. Authentication is required to exploit this vulnerability.

The specific flaw exists within the web-based user interface. The issue results from storing credentials in a recoverable format. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-25986.

BEC Technologies Multiple Routers Cleartext Password Storage Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BEC Technologies routers. Authentication is required to exploit this vulnerability.

The specific flaw exists within the web-based user interface. The issue results from storing credentials in a recoverable format. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-25986.

EPSS

Процентиль: 16%
0.00051
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-256
CWE-312

Связанные уязвимости

CVSS3: 6.5
nvd
10 месяцев назад

BEC Technologies Multiple Routers Cleartext Password Storage Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of BEC Technologies routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the web-based user interface. The issue results from storing credentials in a recoverable format. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-25986.

EPSS

Процентиль: 16%
0.00051
Низкий

4.9 Medium

CVSS3

Дефекты

CWE-256
CWE-312