CVE-2019-7311— Linksys WRT1900ACS 加密问题漏洞

N/A

An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. A lack of encryption in how the user login cookie (admin-auth) is stored on a victim's computer results in the admin password being discoverable by a local attacker, and usable to gain administrative access to the victim's router. The admin password is stored in base64 cleartext in an "admin-auth" cookie. An attacker sniffing the network at the time of login could acquire the router's admin password. Alternatively, gaining physical access to the victim's computer soon after an administrative login could result in compromise.

N/A

N/A

Linksys WRT1900ACS 加密问题漏洞

Linksys WRT1900ACS是Linksys的一款无线路由器。 Linksys WRT1900ACS 1.0.3.187766版本中用户登录密钥的存储方式存在加密问题漏洞。该漏洞源于网络系统或产品未正确使用相关密码算法，导致内容未正确加密、弱加密、明文存储敏感信息等。

N/A

N/A