Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
B-FOCuS Router 312+ allows remote attackers to bypass authentication and gain unauthorized access via a direct request to firmwarecfg.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ECI Telecom B-FOCuS Router 312+非授权访问漏洞
Vulnerability Description
B-FOCuS Router 312+路由器可为用户提供可靠、安全的ADSL2+连接。 B-FOCuS Router对网页的访问控制存在漏洞，远程攻击者可以利用此漏洞非授权访问设备。 默认下可以通过HTTP使用eci路由器的管理界面，这个界面受到登录屏幕的保护。但攻击者可以通过访问未受保护cgi-bin目录中的firmwarecfg页面轻易的绕过登录屏幕，下载路由器的当前设置，包括明文的连接口令和管理口令。这样攻击者就可以完全控制受影响的设备。
CVSS Information
N/A
Vulnerability Type
N/A