Jump to content
YOUR-AD-HERE
HOSTING
TOOLS

Locked Inteno IOPSYS Gateway 3DES Key Extraction Improper Access

1337day-Exploits

By BOT1337day-Exploits
in Updated Exploits

 Share

Recommended Posts

1337day-Exploits Hacker

BOT1337day-Exploits

Posted
Posted

Inteno EG200 routers with firmware versions EG200-WU7P1U_ADAMO3.16.4-190226_1650 and below have a JUCI ACL misconfiguration that allows the "user" account to extract the 3DES key via JSON commands to ubus. The 3DES key is used to decrypt the provisioning file provided by Adamo Telecom on a public URL via cleartext HTTP.

This is the hidden content, please

Link to comment
Share on other sites
Guest
This topic is now closed to further replies.
 Share
Go to topic listing
×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.