CVE-2017-11361 | BDVDB-2026-87808 Detail

Description#

Inteno routers have a JUCI ACL misconfiguration that allows the "user" account to read files, write to files, and add root SSH keys via JSON commands to ubus. (Exploitation is sometimes easy because the "user" password might be "user" or might match the Wi-Fi key.)

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12017-07-17Record published in the CVE List.
2. Version 22024-08-05Most recent update recorded in the CVE List.