Configuration File Exposure in NuCom WR644GACV Devices
CVE-2018-8755

9.8CRITICAL

Key Information:

Vendor

Nucom

Status
Wr644gacv Firmware
Vendor
CVE Published:
25 June 2018

What is CVE-2018-8755?

The NuCom WR644GACV devices are susceptible to an information exposure vulnerability that allows an unauthorized attacker to download the device's configuration file without any credentials. This file can contain sensitive details such as the administrator password and WPA key, which can be exploited to gain full access to the device and its settings. Users of affected models should take immediate action to secure their devices and prevent unauthorized access.

References

https://blog.nivel4.com/investigaciones/vulnerabilidad-en...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.