CVE Vulnerabilities

CVE-2018-12260

Insufficiently Protected Credentials

Published: Jun 12, 2018 | Modified: Oct 03, 2019
CVSS 3.x
6.7
MEDIUM
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
2.1 LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

An issue was discovered on Momentum Axel 720P 5.1.8 devices. The root password can be obtained in cleartext by issuing the command showKey from the root CLI. This password may be the same on all devices

Weakness

The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

Affected Software

Name Vendor Start Version End Version
Momentum_axel_720p_firmware Apollotechnologiesinc 5.1.8 (including) 5.1.8 (including)

Potential Mitigations

References