Описание
An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The username and password setup for the web interface does not require entering the existing password. A malicious user can change the username and password of the interface.
An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The username and password setup for the web interface does not require entering the existing password. A malicious user can change the username and password of the interface.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2022-30328
- https://research.nccgroup.com/2022/06/10/technical-advisory-multiple-vulnerabilities-in-trendnet-tew-831dr-wifi-router-cve-2022-30325-cve-2022-30326-cve-2022-30327-cve-2022-30328-cve-2022-30329
- https://research.nccgroup.com/?research=Technical+advisories
Связанные уязвимости
An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The username and password setup for the web interface does not require entering the existing password. A malicious user can change the username and password of the interface.
Уязвимость микропрограммного обеспечения маршрутизатора Trendnet TEW-831DR, связанная с недостатком механизма восстановления пароля, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации