| タイトル | Linksys E5600 1.1.0.26 Information Disclosure (CWE-200) |
|---|
| 説明 | A pre-authentication information disclosure was discovered in Linksys E5600 firmware v1.1.0.26. /cgi-bin/fqc.cgi is a factory quality-control page that is explicitly listed in the web server authentication exception list (session.exception-uri in lighttpd.conf), so mod_session never requires a session for it. Any unauthenticated network client can retrieve: firmware version, device serial number, all interface MAC addresses (LAN/WAN/2.4G/5G), WiFi ESSIDs, the factory default WiFi passphrase, the factory default WPS PIN, region and boot mode. Reproduction: curl http://<router>/cgi-bin/fqc.cgi (no credentials). Exposure of the default WiFi passphrase and WPS PIN enables direct compromise of the wireless network of devices still running factory wireless credentials, and facilitates targeted attacks and device tracking. Proposed CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (6.5). Discovered by Zimo-666 via configuration audit and dynamic verification. |
|---|
| ソース | ⚠️ https://github.com/Zimo-666/E5600-cves/tree/main/05-fqc-info-disclosure |
|---|
| ユーザー | liuyingqi (UID 102046) |
|---|
| 送信 | 2026年10月10日 16:53 (27 日 ago) |
|---|
| モデレーション | 2026年11月03日 17:40 (24 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 430466 [Linksys E5600 1.1.0.26 Factory Quality Control /cgi-bin/fqc.cgi 情報漏えい] |
|---|
| ポイント | 20 |
|---|