Описание
When configured in debugging mode by an authenticated user with
administrative privileges, ALEOS 4.16 and earlier store the SHA512
hash of the common root password for that version in a directory
accessible to a user with root privileges or equivalent access.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Одновременно
Одно из
EPSS
8.1 High
CVSS3
7.2 High
CVSS3
Дефекты
Связанные уязвимости
When configured in debugging mode by an authenticated user with administrative privileges, ALEOS 4.16 and earlier store the SHA512 hash of the common root password for that version in a directory accessible to a user with root privileges or equivalent access.
Уязвимость режима отладки операционной системы ALEOS беспроводных маршрутизаторов Sierra Wireless MP70, RV50x, RV55, LX40, LX60 ES450, GX450, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации
EPSS
8.1 High
CVSS3
7.2 High
CVSS3