CVE-2018-18376

Published: Oct 16, 2018Modified: Nov 21, 2024

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

goform/getWlanClientInfo in Orange AirBox Y858_FL_01.16_04 allows remote attackers to discover information about currently connected devices (hostnames, IP addresses, MAC addresses, and connection time) via the rand parameter.

Affected (1)

Products: Orange: Airbox Firmware

Orange

1 product

Airbox Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Orange Airbox Firmware	Version y858_fl_01.16_04

Running on/with	Platform Versions
Orange Airbox	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://github.com/remix30303/AirboxLeak

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/remix30303/AirboxLeak

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.