| タイトル | Keenetic Omni Router, Carrier Router, Viva Router, Ultra Router, Ultra II Router, Giga Router * 4.1.2.15/4.1.2.14/4.0.2.215/3.7.77/3.5.68/1.6.49 Information Disclosure |
|---|
| 説明 | The Keenetic Router was found to expose sensitive configuration details through JavaScript files ndmComponents.js and version.js. These files include detailed information about enabled components and system version, hardware ID, and operational modes which can be leveraged by an attacker to gain insights into the system configuration without authentication and potentially exploit specific vulnerabilities or misconfigurations, affecting over 387,000 devices on the Internet. |
|---|
| ソース | ⚠️ https://netsecfish.notion.site/Information-Disclosure-in-Keenetic-Router-d4a12a499cef4acf80e191bdaf20c151?pvs=4 |
|---|
| ユーザー | netsecfish (UID 64568) |
|---|
| 送信 | 2024年04月14日 14:55 (3 年 ago) |
|---|
| モデレーション | 2024年04月20日 15:51 (6 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 261674 [Keenetic KN-1010/KN-1410/KN-1711/KN-1810/KN-1910 迄 4.1.2.15 Version Data /version.js 情報漏えい] |
|---|
| ポイント | 17 |
|---|