The weak password on the web user interface can be exploited via HTTP or HTTPS. Once such access has been obtained, the other passwords can be changed. The weak password on Linux accounts can be accessed via SSH or Telnet, the former of which is by default enabled on trusted interfaces. While the SSH service does not support root login, a user logging in using either of the other Linux accounts may elevate to root access using the su command if they have access to the associated password.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:HRedlion Da50n
HWRedlionwszystkie wersjeRedlion Da50n Firmware
OSRedlionwszystkie wersje
Related vulnerabilities
Authorized users may install a maliciously modified package file when updating the device via the web user int...
A malicious actor having access to the exported configuration file may obtain the stored credentials and there...
The default configuration of Crimson 3.1 (Build versions prior to 3119.001) allows a user to be able to read a...
The affected product is vulnerable due to an undocumented interface found on the device, which may allow an at...
The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely exe...