PT-2013-5328
CVE-2013-5006
·
Publicado
2013-07-31
·
Atualizado
2020-02-24
Descrição por
CVSS 2.0
4.3
MédiaMétricasAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Western Digital My Net N600 versions 1.03.12 through 1.04.16
Western Digital My Net N750 versions 1.03.12 through 1.04.16
Western Digital My Net N900 versions 1.05.12 through 1.06.28
Western Digital My Net N900C versions 1.05.12 through 1.06.28
Description
The issue allows remote attackers to discover the cleartext administrative password by reading the
var pass= line within the HTML source code of the main internet.php file.Recommendations
For Western Digital My Net N600 versions 1.03.12 through 1.04.16, update the firmware to a version that is not affected by this issue.
For Western Digital My Net N750 versions 1.03.12 through 1.04.16, update the firmware to a version that is not affected by this issue.
For Western Digital My Net N900 versions 1.05.12 through 1.06.28, update the firmware to a version that is not affected by this issue.
For Western Digital My Net N900C versions 1.05.12 through 1.06.28, update the firmware to a version that is not affected by this issue.
Explorabilidade
Exploit
Correção
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾