goform/getProfileList in Orange ... CVE-2018-18375

5.0 AV AC AU C I A
发布: 2018-10-15
修订: 2018-12-11

goform/getProfileList in Orange AirBox Y858_FL_01.16_04 allows attackers to extract APN data (name, number, username, and password) via the rand parameter.

0%
暂无可用Exp或PoC
当前有1条受影响产品信息