漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of NETGEAR R6120, R6080, R6260, R6220, R6020, JNR3210, and WNR2020 routers with firmware 1.0.66. Authentication is not required to exploit this vulnerability. The specific flaw exists within the mini_httpd service, which listens on TCP port 80 by default. The issue results from incorrect string matching logic when accessing protected pages. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-10754.
CVSS Information
N/A
Vulnerability Type
使用候选路径或通道进行的认证绕过
Vulnerability Title
mini_httpd 安全漏洞
Vulnerability Description
mini_httpd是个人开发者的一款嵌入式Web服务器。 mini_httpd service 存在安全漏洞，该漏洞源于访问受保护页面时不正确的字符串匹配逻辑导致的。攻击者可利用该漏洞可以利用此漏洞公开存储的凭证，从而导致进一步的破坏。以下产品及版本受到影响：NETGEAR R6120、R6080、R6260、R6220、R6020、JNR3210和固件1.0.66的WNR2020路由器。
CVSS Information
N/A
Vulnerability Type
N/A