critical9.8Public exploit code
CVE-2020-6170
An authentication bypass vulnerability on Genexis Platinum-4410 v2.1 P4410-V2 1.28 devices allows attackers to obtain cleartext credentials from the HTML sourc…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Genexis Platinum-4410 2.1 - Authentication Bypass2020-01-24 · webapps · hardware
Impact
An authentication bypass vulnerability on Genexis Platinum-4410 v2.1 P4410-V2 1.28 devices allows attackers to obtain cleartext credentials from the HTML source code of the cgi-bin/index2.asp URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Genexis | Platinum-4410 Firmware | Version 1.28 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/156075/Genexis-Platinum-4410-2.1-Authentication-Bypass.html
- https://medium.com/%40husinulzsanub/exploiting-router-authentication-through-web-interface-68660c708206
- http://packetstormsecurity.com/files/156075/Genexis-Platinum-4410-2.1-Authentication-Bypass.html
- https://medium.com/%40husinulzsanub/exploiting-router-authentication-through-web-interface-68660c708206