RSS   Vulnerabilities for 'Rbw-100 firmware'   RSS

2019-04-05
 
CVE-2019-10479

CWE-798
 

 
An issue was discovered on Glory RBW-100 devices with firmware ISP-K05-02 7.0.0. A hard-coded username and password were identified that allow a remote attacker to gain admin access to the Front Circle Controller web interface.

 
 
CVE-2019-10478

CWE-434
 

 
An issue was discovered on Glory RBW-100 devices with firmware ISP-K05-02 7.0.0. An unrestricted file upload vulnerability in the Front Circle Controller glytoolcgi/settingfile_upload.cgi allows attackers to upload supplied data. This can be used to place attacker controlled code on the filesystem that can be executed and can lead to a reverse root shell.

 


Copyright 2024, cxsecurity.com

 

Back to Top