提出 #584324: Multilaser Sirius RE016 MLT1.0 Information Disclosure情報

タイトルMultilaser Sirius RE016 MLT1.0 Information Disclosure
説明This vulnerability allows unauthorized disclosure of administrative credentials from the Multilaser Sirius RE016 router via the /cgi-bin/cstecgi.cgi endpoint. A remote attacker can obtain the administrator’s username and password without authentication, exposing the device to severe security risks such as full router takeover, traffic interception, and internal network attacks.
ソース⚠️ https://github.com/DefaultCh40s/RE016/blob/main/re016.py
ユーザー
 DefaultCh40s (UID 85145)
送信2025年05月24日 22:22 (1 年 ago)
モデレーション2025年06月01日 13:11 (8 days later)
ステータス承諾済み
VulDBエントリ310769 [Multilaser Sirius RE016 MLT1.0 /cgi-bin/cstecgi.cgi 情報漏えい]
ポイント19

Want to stay up to date on a daily basis?

Enable the mail alert feature now!