| Título | Multilaser Sirius RE016 MLT1.0 Authentication Bypass |
|---|
| Descripción | This vulnerability allows a remote attacker to change the administrator password on the Multilaser Sirius RE016 router without authentication via the /cgi-bin/cstecgi.cgi endpoint. This enables full control over the device, compromising network security and allowing persistence and privilege escalation attacks. |
|---|
| Fuente | ⚠️ https://github.com/DefaultCh40s/RE016/blob/main/re016.py |
|---|
| Usuario | DefaultCh40s (UID 85145) |
|---|
| Sumisión | 2025-05-24 22:30 (hace 1 Año) |
|---|
| Moderación | 2025-06-01 13:11 (8 days later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 310770 [Multilaser Sirius RE016 MLT1.0 Password Change /cgi-bin/cstecgi.cgi autenticación débil] |
|---|
| Puntos | 17 |
|---|