Submit #636138: Cudy Cudy WR1200EA Router 2.3.7 Password Hash With Insufficient Computational Effortinfo

TitelCudy Cudy WR1200EA Router 2.3.7 Password Hash With Insufficient Computational Effort
BeschreibungThe vulnerability was discovered by analyzing the firmware (WR1200EA-R62-2.3.7-20250113-121810-flash.bin). The /etc/shadow file was extracted, and the root user's MD5-crypt hash was cracked using John the Ripper, revealing the default password "admin." This weak credential allows attackers to log in to the router's administrative interface or other services without additional exploits.
Quelle⚠️ https://github.com/ZZ2266/.github.io/tree/main/Cudy
Benutzer
 n0ps1ed (UID 88889)
Einreichung16.08.2025 14:32 (vor 1 Jahr)
Moderieren28.08.2025 16:42 (12 days later)
StatusAkzeptiert
VulDB Eintrag321761 [Cudy WR1200EA 2.3.7-20250113-121810 /etc/shadow Information Disclosure]
Punkte19

Do you need the next level of professionalism?

Upgrade your account now!