cleartext password exposure AFFECTS ASUS N66
The router stored its username and password in clear text in an accessible file.
Explicit Confidence 99% · Jack Rhysider EP 5 Details
“the password was stored in clear text in just a plain file”
Vulnerability
vulnerability:cleartext_password_exposure
Also: clear text password
Router credentials were stored in a plain text file accessible without authentication.
Router credentials were stored in a plain text file accessible without authentication.
“the password was stored in clear text in just a plain file”
“The clear text password was in an unprotected directory structure.”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | AFFECTS | ASUS N66 | Explicit | 5 |
| outgoing | AFFECTS | AI Cloud | Explicit | 5 |
| outgoing | DISCOVERED_BY | Kyle Lovett | Derived | 5 |
| incoming | INVOLVES | ASUSGATE | Explicit | 5 |
cleartext password exposure AFFECTS ASUS N66
The router stored its username and password in clear text in an accessible file.
Explicit Confidence 99% · Jack Rhysider EP 5 Details
“the password was stored in clear text in just a plain file”
cleartext password exposure AFFECTS AI Cloud
When AI Cloud was enabled, the router's clear-text password could be reached from outside.
Explicit Confidence 96% · Kyle Lovett EP 5 Details
“I was able to get to it from the outside as well with a clear text password”
cleartext password exposure DISCOVERED_BY Kyle Lovett
Kyle found the clear-text password exposure by browsing to the exposed file.
Derived Confidence 95% · Kyle Lovett EP 5 Details
“That only took me maybe twenty, twenty-five minutes to find”
ASUSGATE INVOLVES cleartext password exposure
The incident involved public disclosure of the clear-text password flaw.
Explicit Confidence 98% · Kyle Lovett EP 5 Details
“That’s when I went on there and I put that one disclosure about the clear text password”