Credential Leakage in Genexis Platinum 4410 Router

CVE-2020-25988

What is CVE-2020-25988?

The Genexis Platinum 4410 Router features a UPNP service that listens on port 5555, which contains an action called 'X_GetAccess'. This action can potentially leak the administrative credentials of the device to an attacker who is adjacent to the network. By exploiting this flaw, a malicious user could gain unauthorized access to sensitive settings and controls of the router, thus compromising network integrity.

References