Description (CNA)
Netis E1+ version 1.2.32533 contains a hardcoded root account vulnerability that allows unauthenticated attackers to access the device with predefined credentials. Attackers can leverage the embedded root account with a crackable password to gain full administrative access to the network device.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Netis Systems Co., Ltd. / Netis E1+ | affected 1.2.32533 |
CWE
CWE-798
References
- https://www.exploit-db.com/exploits/48382
- http://www.netis-systems.com
- https://www.vulncheck.com/advisories/netis-e-backdoor-account-root
ADP enrichment
No English description supplied.
No references supplied.