NetSight
high7.5

CVE-2018-18376

goform/getWlanClientInfo in Orange AirBox Y858_FL_01.16_04 allows remote attackers to discover information about currently connected devices (hostnames, IP add…

Impact

goform/getWlanClientInfo in Orange AirBox Y858_FL_01.16_04 allows remote attackers to discover information about currently connected devices (hostnames, IP addresses, MAC addresses, and connection time) via the rand parameter.

Affected products

VendorProductAffected versions
OrangeAirbox Firmware
Version y858_fl_01.16_04

Weakness classification

References