Skip to content
OpenAdvisories
High · 7.5 CVE-2023-51740 EUVD-2023-56437GHSA-7qmq-34hq-j5mx

Cleartext Submission of Password vulnerability in Skyworth Router

Published Jan 17, 2024 · Updated Nov 13, 2024 · Assigned by CERT-In

Description

This vulnerability exist in Skyworth Router CM5100, version 4.1.1.24, due to transmission of authentication credentials in plaintext over the network. A remote attacker could exploit this vulnerability by eavesdropping on the victim’s network traffic to extract username and password from the web interface (Login Page) of the vulnerable targeted system.

Affected products

VendorProductAffectedFixed
Hathway Skyworth Router CM5100 ≤ 4.1.1.24 —

References