Priority LOW 38
Certain models of routers from Billion Electric has hard-coded embedded linux credentials, allowing attackers to log in through the SSH service using these credentials and obtain root privilege of the system.
Vulnerabilities
5 records
TI-2024-11119 CVE-2024-11983 · GHSA-88vw-p4cx-4677
Billion Electric router - OS Command Injection
Priority LOW 36
Certain models of routers from Billion Electric has an OS Command Injection vulnerability, allowing remote attackers with administrator privileges to inject arbitrary system commands into a specific SSH function and exec…
TI-2024-11118 CVE-2024-11982 · GHSA-rwv8-hfhp-fj52
Billion Electric router - Plaintext Storage of a Password
Priority LOW 35
Certain models of routers from Billion Electric has a Plaintext Storage of a Password vulnerability.
TI-2024-11117 CVE-2024-11981 · GHSA-2r3m-26p3-wr26
Billion Electric router - Authentication Bypass
Priority MEDIUM 40
Certain models of routers from Billion Electric has an Authentication Bypass vulnerability, allowing unautheticated attackers to retrive contents of arbitrary web pages.
TI-2024-11116 CVE-2024-11980 · GHSA-cv6w-7hvv-mf8v
Billion Electric router - Missing Authentication
Priority MEDIUM 44
Certain modes of routers from Billion Electric have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access the specific functionality to obtain partial device information, mo…