Hardcoded Password Vulnerability Discovered in Ubiquiti U6-LR 6.6.65
CVE-2024-54750

9.8CRITICAL

Key Information:

Vendor

Ubiquiti

Status
U6-LR
Vendor
CVE Published:
6 December 2024

What is CVE-2024-54750?

The Ubiquiti U6-LR router version 6.6.65 contains a hardcoded password in its /etc/shadow file, enabling potential attackers to access the device with root privileges. While Ubiquiti asserts that this hardcoded password should not compromise security post-setup, the existence of such a vulnerability poses a significant risk. Network administrators are advised to take precautions to secure their devices and ensure proper configuration following initial setup.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://colorful-meadow-5b9.notion.site/U6-LR_HardCode_vu...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.