Credential Leakage in Genexis Platinum 4410 Router
CVE-2020-25988
6.5MEDIUM
Key Information:
- Vendor
Genexis
- Status
- Vendor
- CVE Published:
- 17 November 2020
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2020-25988?
The Genexis Platinum 4410 Router features a UPNP service that listens on port 5555, which contains an action called 'X_GetAccess'. This action can potentially leak the administrative credentials of the device to an attacker who is adjacent to the network. By exploiting this flaw, a malicious user could gain unauthorized access to sensitive settings and controls of the router, thus compromising network integrity.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.