| Titre | Cudy Cudy WR1200EA Router 2.3.7 Password Hash With Insufficient Computational Effort |
|---|
| Description | The vulnerability was discovered by analyzing the firmware (WR1200EA-R62-2.3.7-20250113-121810-flash.bin). The /etc/shadow file was extracted, and the root user's MD5-crypt hash was cracked using John the Ripper, revealing the default password "admin." This weak credential allows attackers to log in to the router's administrative interface or other services without additional exploits. |
|---|
| La source | ⚠️ https://github.com/ZZ2266/.github.io/tree/main/Cudy |
|---|
| Utilisateur | n0ps1ed (UID 88889) |
|---|
| Soumission | 16/08/2025 14:32 (il y a 1 Année) |
|---|
| Modérer | 28/08/2025 16:42 (12 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 321761 [Cudy WR1200EA 2.3.7-20250113-121810 /etc/shadow divulgation d'information] |
|---|
| Points | 19 |
|---|