Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Tim Tepatti

#31643of 60,596
9.1Total CVSS
Vulnerabilities · 1
PT-2019-14042
2019-08-26
9.1
CVE-2019-15304
Lierda
Lierda Grill Temperature Monitor
The issue concerns a default password set to `admin` for the admin account, allowing potential Denial of Service or Information Disclosure attacks via an undocumented access-point configuration page on the device. The accompanying wifi thermometer app requires excessive permissions, including Fine GPS location, camera, app lists, Serial number, and IMEI. Additionally, the app connects to several China-based URLs, including Alibaba cloud computing. There is also a "backdoor" login access for admin purposes.