CVE-2023-51741
Cleartext Submission of Password vulnerability in Skyworth Router
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 7.5EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
17 ene 2024Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to transmission of authentication credentials in plaintext over the network. A remote attacker could exploit this vulnerability by eavesdropping on the victim’s network traffic to extract username and password from the web interface (Password Reset Page) of the vulnerable targeted system.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Productos afectados
Hathway · Skyworth Router CM5100¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →