Skip to content
OpenAdvisories
High · 7.2 CVE-2024-11982 EUVD-2024-34039GHSA-rwv8-hfhp-fj52

Billion Electric router - Plaintext Storage of a Password

Published Nov 29, 2024 · Updated Nov 29, 2024 · Assigned by twcert

Vendor: Billion Electric Product: M100 Product: M120N Product: M150 Product: M500

Description

Certain models of routers from Billion Electric has a Plaintext Storage of a Password vulnerability. Remote attackers with administrator privileges can access the user settings page to retrieve plaintext passwords.

Affected products

VendorProductAffectedFixed
Billion Electric M100 1.04.1.592.* – < 1.04.1.592.8, 1.04.1.613.* – < 1.04.1.613.13, 1.04.1.* – < 1.04.1.675 1.04.1.592.8
Billion Electric M150 1.04.1.592.* – < 1.04.1.592.8, 1.04.1.613.* – < 1.04.1.613.13, 1.04.1.* – < 1.04.1.675 1.04.1.592.8
Billion Electric M120N 1.04.1.592.* – < 1.04.1.592.8, 1.04.1.613.* – < 1.04.1.613.13, 1.04.1.* – < 1.04.1.675 1.04.1.592.8
Billion Electric M500 1.04.1.592.* – < 1.04.1.592.8, 1.04.1.613.* – < 1.04.1.613.13, 1.04.1.* – < 1.04.1.675 1.04.1.592.8

References