UPNP Service listening on port 5555 in Genexis Platinum 4410 Router V2.1 (P4410-V2–1.34H) has an action X_GetAccess which leaks the credentials of admin, provided that the attacker is network adjacent.
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Platinum_4410_firmware | Genexis | p4410-v2-1.34h (including) | p4410-v2-1.34h (including) |
