Description
The /password.html page of the Web management interface of the Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) contains the administrator account password in plaintext. The page can be intercepted on HTTP.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Acexy Wireless-N WiFi Repeater REV 1.0 - Repeater Password Disclosure http/cves/2021/CVE-2021-28937.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.