R radio network fm transmitter 1.07 system.cgi password disclosure Vulnerability / Exploit
/
/
/
Exploits / Vulnerability Discovered : 2024-03-03 |
Type : remote |
Platform : hardware
This exploit / vulnerability R radio network fm transmitter 1.07 system.cgi password disclosure is for educational purposes only and if it is used you will do on your own risk!
[+] Code ...
R Radio Network FM Transmitter 1.07 system.cgi Password Disclosure
Vendor: R Radio Network
Product web page: http://www.pktc.ac.th
Affected version: 1.07
Summary: R Radio FM Transmitter that includes FM Exciter and
FM Amplifier parameter setup.
Desc: The transmitter suffers from an improper access control
that allows an unauthenticated actor to directly reference the
system.cgi endpoint and disclose the clear-text password of the
admin user allowing authentication bypass and FM station setup
access.
Tested on: CSBtechDevice
Vulnerability discovered by Gjoko 'LiquidWorm' Krstic
@zeroscience