CVE-2024-44815

Published: Sep 10, 2024Modified: Jun 17, 2026

4.6

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 0.9 / Impact: 3.6

Source: NVD

Description

Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV.

Affected (1)

Products: Hathway: Skyworth Cm5100 511 Firmware

Hathway

1 product

Skyworth Cm5100 511 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hathway Skyworth Cm5100 511 Firmware	Version 4.1.1.24

Running on/with	Platform Versions
Hathway Skyworth Cm5100 511	All versions

Related CWEs

CWE-256

Plaintext Storage of a Password

Storing a password in plaintext may result in a system compromise.

CWE-522

Insufficiently Protected Credentials

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (1)

https://github.com/nitinronge91/Extracting-User-credentials-For-Web-portal-and-WiFi-AP-For-Hathway-Router-CVE-2024-44815-

Source: cve@mitre.org

ExploitThird Party Advisory

Timeline

No history available yet.