Exploiting CVE-2024-4022 - Information Disclosure in Keenetic Router

Exploiting CVE-2024-4022 - Information Disclosure in Keenetic Router

OS

2024.1.*
2020.3.*
2019.4.*

Screenshots from the blog posts

images/clvb3wws9gycb1imx853qc4mw.jpgimages/clvb3wws9gycb1imx853qc4mw.jpg

Summary

A vulnerability was found in Keenetic KN-1010, KN-1410, KN-1711, KN-1810 and KN-1910 up to 4.1.2.15. It has been rated as problematic. For the affected devices, the `/version.js` and `/ndmComponents.js` files provide sensitive configuration details without any authentication! This post covers the exploit to pull this information from the affected devices.

general

Description

@secatgourity

190 posts

Total vcoins

0

Social media links

Comments (0)