| عنوان | FNKvision FNK-GU2 Wireless IP Camera Firmware version 40.1.7 and prior Clear-text Storage of Sensitive Information (CWE-312) |
|---|
| الوصف | The FNKvision GU2 Wireless IP Camera stores the wireless network credentials (SSID and password) in a plaintext configuration file on the filesystem. An attacker with root access, obtainable via the unprotected serial interface, can read this file and retrieve the Wi-Fi credentials, potentially allowing them to compromise the local network. |
|---|
| المصدر | ⚠️ https://medium.com/@pundhapat/sqli-in-the-cloud-root-on-the-board-a-beginners-journey-into-iot-hacking-06efb2539a21 |
|---|
| المستخدم | 0xHasta (UID 86257) |
|---|
| ارسال | 02/07/2025 08:30 PM (1 سنة منذ) |
|---|
| الاعتدال | 07/07/2025 03:19 PM (5 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 315164 [FNKvision FNK-GU2 حتى 40.1.7 /rom/wpa_supplicant.conf تشفير ضعيف] |
|---|
| النقاط | 18 |
|---|