Unscored CVE-2021-25326 EUVD-2021-12223GHSA-gx8x-9h9h-w9hx

Skyworth Digital Technology RN510 V.3.1.0.4 is affected by an incorrect access control vulnerability in/cgi-bin/test_version.asp. If Wi-Fi …

Published Apr 9, 2021 · Updated Aug 3, 2024 · Assigned by mitre

Description

Skyworth Digital Technology RN510 V.3.1.0.4 is affected by an incorrect access control vulnerability in/cgi-bin/test_version.asp. If Wi-Fi is connected but an unauthenticated user visits a URL, the SSID password and web UI password may be disclosed.

References

https://s3curityb3ast.github.io/KSA-Dev-013.md
20210504 KSA-Dev-0012:CVE-2021-25326:Unauthenticated Sensitive information Discloser in Skyworth RN510 Mesh Extender mailing-list
http://packetstormsecurity.com/files/162455/Shenzhen-Skyworth-RN510-Information-Disclosure.html