Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g654-hw9f-49w6

Опубликовано: 03 мая 2024
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability.

The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-19899.

EPSS

Процентиль: 80%
0.01455
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-290

Связанные уязвимости

CVSS3: 6.5
nvd
почти 2 года назад

TP-Link TL-WR841N dropbearpwd Improper Authentication Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of TP-Link TL-WR841N routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the httpd service, which listens on TCP port 80 by default. The issue results from improper authentication. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. . Was ZDI-CAN-19899.

CVSS3: 6.5
fstec
почти 3 года назад

Уязвимость компонента dropbearpwd микропрограммного обеспечения маршрутизатора TP-Link TL-WR841N, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 80%
0.01455
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-290