https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:38:18 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-258587 EUVD-2026-258587 https://cve.radiocsirt.org/vuln/euvd-2026-258587 https://cve.radiocsirt.org/vuln/fkie_cve-2024-28875 <p>A security flaw involving hard-coded credentials in LevelOne WBR-6012&#39;s web services allows attackers to gain unauthorized access during the first 30 seconds post-boot. Other vulnerabilities can force a reboot, circumventing the initial time restriction for exploitation.The backdoor string can be found at address 0x80100910 80100910 40 6d 21 74 ds &#34;@m!t2K1&#34; 32 4b 31 00 It is referenced by the function located at 0x800b78b0 and is used as shown in the pseudocode below: if ((SECOND_FROM_BOOT_TIME &lt; 300) &amp;&amp; (is_equal = strcmp(password,&#34;@m!t2K1&#34;)) { return 1;} Where 1 is the return value to admin-level access (0 being fail and 3 being user).</p> <p>A security flaw involving hard-coded credentials in LevelOne WBR-6012&#39;s web services allows attackers to gain unauthorized access during the first 30 seconds post-boot. Other vulnerabilities can force a reboot, circumventing the initial time restriction for exploitation.The backdoor string can be found at address 0x80100910 80100910 40 6d 21 74 ds &#34;@m!t2K1&#34; 32 4b 31 00 It is referenced by the function located at 0x800b78b0 and is used as shown in the pseudocode below: if ((SECOND_FROM_BOOT_TIME &lt; 300) &amp;&amp; (is_equal = strcmp(password,&#34;@m!t2K1&#34;)) { return 1;} Where 1 is the return value to admin-level access (0 being fail and 3 being user).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-28875 https://cve.radiocsirt.org/vuln/ghsa-4fj6-9r38-4v86 <p>A security flaw involving hard-coded credentials in LevelOne WBR-6012&#39;s web services allows attackers to gain unauthorized access during the first 30 seconds post-boot. Other vulnerabilities can force a reboot, circumventing the initial time restriction for exploitation.The backdoor string can be found at address 0x80100910</p> <p>80100910 40 6d 21 74 ds &#34;@m!t2K1&#34; 32 4b 31 00 It is referenced by the function located at 0x800b78b0 and is used as shown in the pseudocode below:</p> <p>if ((SECOND_FROM_BOOT_TIME &lt; 300) &amp;&amp; (is_equal = strcmp(password,&#34;@m!t2K1&#34;)) { return 1;} Where 1 is the return value to admin-level access (0 being fail and 3 being user).</p> <p>A security flaw involving hard-coded credentials in LevelOne WBR-6012&#39;s web services allows attackers to gain unauthorized access during the first 30 seconds post-boot. Other vulnerabilities can force a reboot, circumventing the initial time restriction for exploitation.The backdoor string can be found at address 0x80100910</p> <p>80100910 40 6d 21 74 ds &#34;@m!t2K1&#34; 32 4b 31 00 It is referenced by the function located at 0x800b78b0 and is used as shown in the pseudocode below:</p> <p>if ((SECOND_FROM_BOOT_TIME &lt; 300) &amp;&amp; (is_equal = strcmp(password,&#34;@m!t2K1&#34;)) { return 1;} Where 1 is the return value to admin-level access (0 being fail and 3 being user).</p> https://cve.radiocsirt.org/vuln/ghsa-4fj6-9r38-4v86 https://cve.radiocsirt.org/vuln/gsd-2024-28875 gsd-2024-28875 https://cve.radiocsirt.org/vuln/gsd-2024-28875