| Title | 中国联通网关存在信息泄露漏洞 |
|---|
| Description | China Unicom gateway has information leakage vulnerability. Device name: Gigabit passive optical fiber access client equipment (GPON ONU) China Unicom home gateway TEWA-800G
1. Debug by disassembling the equipment and connecting the UART serial port with a TTL cable
2. Use the putty tool to select the com port and connect the device for debugging
3. After successful connection, the console prints the current device log
4. However, during the log printing process, the default password of the device will be printed in clear text
5. 5.By comparing the default password on the back of the console and device, it was found that the password is completely consistent, indicating that the password will be displayed in clear text during the console printing stage |
|---|
| User | pinglan0_9 (UID 54474) |
|---|
| Submission | 09/13/2023 09:41 (3 years ago) |
|---|
| Moderation | 09/16/2023 19:06 (3 days later) |
|---|
| Status | Duplicate |
|---|
| VulDB entry | 239870 [China Unicom TEWA-800G 4.16L.04_CT2015_Yueme debug log file] |
|---|
| Points | 0 |
|---|