Отправить #513391: Audi UTR Dashcam 2.0 Plaintext Password in Configuration FileИнформация

НазваниеAudi UTR Dashcam 2.0 Plaintext Password in Configuration File
ОписаниеHardcoded FTP Credentials in AUDI Universal Traffic Recorder App - AUDI UTR Dashcam’s companion app contains hardcoded FTP credentials, allowing unauthorized attackers to gain access to the dashcam’s network and functions. The application contains a hardcoded password ("wificam") that can be easily retrieved by searching the APK for "password".
Источник⚠️ https://github.com/geo-chen/Audi/blob/main/README.md#finding-2-hardcoded-credentials-in-audi-universal-traffic-recorder-app
Пользователь
 geochen (UID 78995)
Представление03.03.2025 17:29 (2 лет назад)
Модерация20.03.2025 11:24 (17 days later)
Статуспринято
Запись VulDB300168 [Audi Universal Traffic Recorder App 2.0 FTP Credentials слабая аутентификация]
Баллы19

Do you know our Splunk app?

Download it now for free!