Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-54mj-hcw7-m39p

Опубликовано: 18 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Siklu TG Terragraph devices before approximately 2.1.1 have a hardcoded root password that has been revealed via a brute force attack on an MD5 hash. It can be used for "debug login" by an admin. NOTE: the vulnerability is not fixed by the 2.1.1 firmware; instead, its is fixed in newer hardware, which would typically bs used with firmware 2.1.1 or later.

Siklu TG Terragraph devices before approximately 2.1.1 have a hardcoded root password that has been revealed via a brute force attack on an MD5 hash. It can be used for "debug login" by an admin. NOTE: the vulnerability is not fixed by the 2.1.1 firmware; instead, its is fixed in newer hardware, which would typically bs used with firmware 2.1.1 or later.

EPSS

Процентиль: 26%
0.00089
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 9.8
nvd
почти 2 года назад

Siklu TG Terragraph devices before approximately 2.1.1 have a hardcoded root password that has been revealed via a brute force attack on an MD5 hash. It can be used for "debug login" by an admin. NOTE: the vulnerability is not fixed by the 2.1.1 firmware; instead, it is fixed in newer hardware, which would typically be used with firmware 2.1.1 or later.

EPSS

Процентиль: 26%
0.00089
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-284