Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rhh2-f22c-xh7f

Опубликовано: 04 нояб. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 4.4
CVSS3: 4.6

Описание

This vulnerability exists in TP-Link IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the vulnerable device.

This vulnerability exists in TP-Link IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the vulnerable device.

EPSS

Процентиль: 13%
0.00043
Низкий

4.4 Medium

CVSS4

4.6 Medium

CVSS3

Дефекты

CWE-312

Связанные уязвимости

CVSS3: 4.6
nvd
больше 1 года назад

This vulnerability exists in TP-Link IoT Smart Hub due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the Wi-Fi credentials stored on the vulnerable device.

EPSS

Процентиль: 13%
0.00043
Низкий

4.4 Medium

CVSS4

4.6 Medium

CVSS3

Дефекты

CWE-312