Skip to content
OpenAdvisories

Vendor

Billion Electric

5 known vulnerabilities.

5 results · Clear filters · Feed

  • High 8.4

    Billion Electric M120N - Use of Hard-coded Credentials

    Certain models of routers from Billion Electric has hard-coded embedded linux credentials, allowing attackers to log in through the SSH service using these credentials and obtain root privilege of the system.

  • High 7.2

    Billion Electric router - OS Command Injection

    Certain models of routers from Billion Electric has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject arbitrary system commands into a specific SSH function and execute them on the device.

  • High 7.2

    Billion Electric router - Plaintext Storage of a Password

    Certain models of routers from Billion Electric has a Plaintext Storage of a Password vulnerability. Remote attackers with administrator privileges can access the user settings page to retrieve plaintext passwords.

  • High 7.5

    Billion Electric router - Authentication Bypass

    Certain models of routers from Billion Electric has an Authentication Bypass vulnerability, allowing unautheticated attackers to retrive contents of arbitrary web pages.

  • High 8.6

    Billion Electric router - Missing Authentication

    Certain modes of routers from Billion Electric have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access the specific functionality to obtain partial device information, modify the WiFi SSID, and restart the dev…