In the Macally WIFISD2-2A82 Media and Travel Router 2.000.010, the Guest user is able to reset its own password. This process has a vulnerability which can be used to take over the administrator account and results in shell access. As the admin user may read the /etc/shadow file, the password hashes of each user (including root) can be dumped. The root hash can be cracked easily which results in a complete system compromise.
References
| Link | Resource |
|---|---|
| http://packetstormsecurity.com/files/160478/Macally-WIFISD2-2A82-2.000.010-Privilege-Escalation.html | Exploit Third Party Advisory VDB Entry |
| https://drive.google.com/file/d/1PpiRhhfph8U_0KAoIp0AnwY3mVtp-R-g/view | Exploit Third Party Advisory |
| https://github.com/S1lkys/CVE-2020-29669 | Exploit Third Party Advisory |
| http://packetstormsecurity.com/files/160478/Macally-WIFISD2-2A82-2.000.010-Privilege-Escalation.html | Exploit Third Party Advisory VDB Entry |
| https://drive.google.com/file/d/1PpiRhhfph8U_0KAoIp0AnwY3mVtp-R-g/view | Exploit Third Party Advisory |
| https://github.com/S1lkys/CVE-2020-29669 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 05:24
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://packetstormsecurity.com/files/160478/Macally-WIFISD2-2A82-2.000.010-Privilege-Escalation.html - Exploit, Third Party Advisory, VDB Entry | |
| References | () https://drive.google.com/file/d/1PpiRhhfph8U_0KAoIp0AnwY3mVtp-R-g/view - Exploit, Third Party Advisory | |
| References | () https://github.com/S1lkys/CVE-2020-29669 - Exploit, Third Party Advisory |
Information
Published : 2020-12-14 02:15
Updated : 2024-11-21 05:24
NVD link : CVE-2020-29669
Mitre link : CVE-2020-29669
CVE.ORG link : CVE-2020-29669
JSON object : View
Products Affected
macally
- wifisd2-2a82
- wifisd2-2a82_firmware
CWE
CWE-287
Improper Authentication