Plaintext Credential Storage Vulnerability in LB-LINK Router
CVE-2024-33375

9.8CRITICAL

Key Information:

Vendor

LB-LINK

Status
BL-W1210M
Vendor
CVE Published:
14 June 2024

What is CVE-2024-33375?

The LB-LINK BL-W1210M v2.0 router has a critical design flaw that results in user credentials being stored in plaintext within the router's firmware. This vulnerability makes it possible for an attacker to access sensitive information, potentially compromising the security and privacy of users. Without adequate encryption or secure storage practices, the router's firmware exposes users to significant risks, making it imperative for affected users to take immediate action to secure their devices.

References

https://redfoxsec.com/blog/security-advisory-multiple-vul...
https://github.com/ShravanSinghRathore/Security-Advisory-...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.