| 标题 | TOZED ZLT M30s 1.47 Improper Access Control in Debug Interface |
|---|
| 描述 | An Information exposure vulnerability has been identified in the device's internal Universal Asynchronous Reciever-Transmitter (UART) debugging console. It logs the current and factory-set default Wi-Fi credentials in plain text during the boot and factory reset sequences respectively. However, physical access to the device is required to exploit this vulnerability. |
|---|
| 来源 | ⚠️ https://hacklab.eu.org/blogs/zlt_m30s_debug_interface |
|---|
| 用户 | S33K3R (UID 92688) |
|---|
| 提交 | 2025-12-06 22時14分 (11 月前) |
|---|
| 管理 | 2025-12-25 10時36分 (19 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 338411 [TOZED ZLT M30s 直到 1.47 UART Interface 信息公开] |
|---|
| 积分 | 18 |
|---|