CVE-2017-8770

Опубликовано: 20 сент. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 7.8

EPSS Средний

Описание

There is LFD (local file disclosure) on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesystem on the device via a crafted getpage parameter.

Ссылки

http://www.digitalwhisper.co.il/files/Zines/0x56/DW86-1-RepeaterHack.pdf
Technical Description
Third Party Advisory
https://www.exploit-db.com/exploits/42547/
Exploit
Third Party Advisory
VDB Entry
http://www.digitalwhisper.co.il/files/Zines/0x56/DW86-1-RepeaterHack.pdf
Technical Description
Third Party Advisory
https://www.exploit-db.com/exploits/42547/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:twsz:wifi_repeater_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:twsz:wifi_repeater:-:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.2183

Средний

7.5 High

CVSS3

7.8 High

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-c9j9-jc83-c4rq