| शीर्षक | Linksys WRT54GL Wireless-G WiFi Router v4.30.18 Incorrect Access Control |
|---|
| विवरण | # Info Leak in Linksys-WRT54GL Router
## Overview
* Type: Information leak
* Supplier: Linksys
* Product: WRT54GL Wireless-G WiFi Router
* Affect version: (lastest) v4.30.18
* Firmware download: https://downloads.linksys.com/downloads/firmware/FW_WRT54GL_4.30.18.006_US_20160108.bin
## Description
An information leaking vulnerability is at the web management interface of the affected routers. Without any permission, an attacker can get sensitive information such as RAM size and MAC address from the victim URL.
The victim URL is a hidden interface and isn't been protected by authentication.
## Business Impact
The leaked information is sensitive and could result in serious damage. Thus the vulnerability is very dangerous which could also result in reputational damage for the business through the impact on customers' trust.
## Steps to Reproduce
Visit the victim URL from the web, such sensitive information as RAM size, mac address, and some configurations are exposed.
|
|---|
| स्रोत | ⚠️ https://github.com/leetsun/Hints/tree/main/linksys-wrt54gl/3 |
|---|
| उपयोगकर्ता | leetsun (UID 39457) |
|---|
| सबमिशन | 01/02/2024 05:53 AM (3 साल पहले) |
|---|
| संयम | 09/02/2024 05:13 PM (8 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 253330 [Linksys WRT54GL 4.30.18 Web Management Interface /SysInfo1.htm सूचना का प्रकटीकरण] |
|---|
| अंक | 20 |
|---|