CVE-2021-43282

Published: Nov 30, 2021Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

An issue was discovered on Victure WR1200 devices through 1.0.3. The default Wi-Fi WPA2 key is advertised to anyone within Wi-Fi range through the router's MAC address. The device default Wi-Fi password corresponds to the last 4 bytes of the MAC address of its 2.4 GHz network interface controller (NIC). An attacker within scanning range of the Wi-Fi network can thus scan for Wi-Fi networks to obtain the default key.

Affected (1)

Products: Govicture: Wr1200 Firmware

1 product

Wr1200 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Govicture Wr1200 Firmware	Up to 1.0.3

Running on/with	Platform Versions
Govicture Wr1200	All versions

Related CWEs

Use of Hard-coded Credentials

The product contains hard-coded credentials, such as a password or cryptographic key.

References (4)

https://research.nccgroup.com/2021/11/12/technical-advisory-multiple-vulnerabilities-in-victure-wr1200-wifi-router-cve-2021-43282-cve-2021-43283-cve-2021-43284/

Source: cve@mitre.org

ExploitThird Party Advisory

https://www.nccgroup.trust/us/our-research/?research=Technical+advisories

Source: cve@mitre.org

ExploitThird Party Advisory

https://research.nccgroup.com/2021/11/12/technical-advisory-multiple-vulnerabilities-in-victure-wr1200-wifi-router-cve-2021-43282-cve-2021-43283-cve-2021-43284/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://www.nccgroup.trust/us/our-research/?research=Technical+advisories

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.