Description
Netcore NR255-V version 1.5.130703 contains a sensitive information disclosure vulnerability in l7_web_auth_user_show.cgi related to captive-portal credential handling. Attackers can query this component to obtain captive-portal user credentials, compromising confidentiality of authenticated network access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Netcore | NR255-V | 1.5.130703 | — |