| Titel | TOZED ZLT M30s 1.47 Improper Access Control in Debug Interface |
|---|
| Beschreibung | An Information exposure vulnerability has been identified in the device's internal Universal Asynchronous Reciever-Transmitter (UART) debugging console. It logs the current and factory-set default Wi-Fi credentials in plain text during the boot and factory reset sequences respectively. However, physical access to the device is required to exploit this vulnerability. |
|---|
| Quelle | ⚠️ https://hacklab.eu.org/blogs/zlt_m30s_debug_interface |
|---|
| Benutzer | S33K3R (UID 92688) |
|---|
| Einreichung | 06.12.2025 22:14 (vor 6 Monaten) |
|---|
| Moderieren | 25.12.2025 10:36 (19 days later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 338411 [TOZED ZLT M30s bis 1.47 UART Interface Information Disclosure] |
|---|
| Punkte | 18 |
|---|