CVE-2017-8770
HighSummary
There is a LFD (local file disclosure) vulnerability on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesystem on the device via a crafted getpage parameter.
Risk Assessment
This vulnerability may lead to the disclosure of sensitive data stored on the device, posing a serious security threat to the organization.
Recommendation
It is recommended to update the device firmware to the latest version to mitigate this vulnerability and restrict access to the device to trusted users.
Other vulnerabilities in BE126 WIFI repeater 1.0
See all- CVE-2017-8772Critical
On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username: "root", password: "root"). After logging in, they can read, write to the file system, or execute any code.
- CVE-2017-8771Critical
On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username: "root", password: "root"). The attacker can make a user connected to the repeater click on a malicious link that will log into the telnet and infect the device with malicious code.
Original NVD description (English source)
There is LFD (local file disclosure) on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesystem on the device via a crafted getpage parameter.