Librewireless

Ls9 Firmware

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2020-35755

Exploit
  • EPSS 0.29%
  • Veröffentlicht 03.05.2021 21:15:07
  • Zuletzt bearbeitet 21.11.2024 05:28:01

An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a luci_service Read_ NVRAM Direct Access Information Leak. The luci_service deamon running on port 7777 provides a sub-category of commands for which Read_ is prepended. Comm...

7.5

CVE-2020-35756

Exploit
  • EPSS 0.43%
  • Veröffentlicht 03.05.2021 21:15:07
  • Zuletzt bearbeitet 21.11.2024 05:28:01

An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a luci_service GETPASS Configuration Password Information Leak. The luci_service daemon running on port 7777 does not require authentication to return the device configuratio...

9.8

CVE-2020-35757

Exploit
  • EPSS 2.2%
  • Veröffentlicht 03.05.2021 21:15:07
  • Zuletzt bearbeitet 21.11.2024 05:28:01

An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is Unauthenticated Root ADB Access Over TCP. The LS9 web interface provides functionality to access ADB over TCP. This is not enabled by default, but can be enabled by sending a...

9.8

CVE-2020-35758

Exploit
  • EPSS 2.04%
  • Veröffentlicht 03.05.2021 21:15:07
  • Zuletzt bearbeitet 21.11.2024 05:28:01

An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is a Authentication Bypass in the Web Interface. This interface does not properly restrict access to internal functionality. Despite presenting a password login page on first ac...