Credential Leakage in Genexis Platinum 4410 Router
CVE-2020-25988
Key Information:
- Vendor
Genexis
- Status
- Vendor
- CVE Published:
- 17 November 2020
Badges
What is CVE-2020-25988?
The Genexis Platinum 4410 Router features a UPNP service that listens on port 5555, which contains an action called 'X_GetAccess'. This action can potentially leak the administrative credentials of the device to an attacker who is adjacent to the network. By exploiting this flaw, a malicious user could gain unauthorized access to sensitive settings and controls of the router, thus compromising network integrity.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.