Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
On Verizon 5G Home LVSKIHP InDoorUnit (IDU) 3.4.66.162 and OutDoorUnit (ODU) 3.33.101.0 devices, the CRTC and ODU RPC endpoints rely on a static certificate for access control. This certificate is embedded in the firmware, and is identical across the fleet of devices. An attacker need only download this firmware and extract the private components of these certificates (from /etc/lighttpd.d/ca.pem and /etc/lighttpd.d/server.pem) to gain access. (The firmware download location is shown in a device's upgrade logs.)
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Verizon 5G Home LVSKIHP 信任管理问题漏洞
Vulnerability Description
Verizon 5G Home LVSKIHP是美国Verizon公司的一款一体化集成调制解调器和路由器。可提供对 Verizon Wireless 5G 无线家庭互联网服务的访问。 Verizon 5G Home LVSKIHP InDoorUnit（IDU）3.4.66.162版本和OutDoorUnit（ODU）3.33.101.0版本设备存在安全漏洞，该漏洞源于CRTC和ODU RPC端点依靠一个静态证书进行访问控制。该证书嵌入在固件中，并且在所有的设备中都是相同的。攻击者只需要下载这个固件并提取
CVSS Information
N/A
Vulnerability Type
N/A