| Titolo | TOZED ZLT M30s 1.47 Improper Access Control in Debug Interface |
|---|
| Descrizione | An Information exposure vulnerability has been identified in the device's internal Universal Asynchronous Reciever-Transmitter (UART) debugging console. It logs the current and factory-set default Wi-Fi credentials in plain text during the boot and factory reset sequences respectively. However, physical access to the device is required to exploit this vulnerability. |
|---|
| Fonte | ⚠️ https://hacklab.eu.org/blogs/zlt_m30s_debug_interface |
|---|
| Utente | S33K3R (UID 92688) |
|---|
| Sottomissione | 06/12/2025 22:14 (6 mesi fa) |
|---|
| Moderazione | 25/12/2025 10:36 (19 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 338411 [TOZED ZLT M30s fino a 1.47 UART Interface rivelazione di informazioni] |
|---|
| Punti | 18 |
|---|