https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 11:14:29 +0000 https://cve.radiocsirt.org/vuln/cve-2025-57433 <p>The 2wcom IP-4c 2.15.5 device&#39;s web interface includes an information disclosure vulnerability. By sending a crafted POST request to a specific endpoint (/cwi/ajax_request/get_data.php), an authenticated attacker (even with a low-privileged account like guest) can retrieve the hashed passwords for the admin, manager, and guest accounts. This significantly weakens the system&#39;s security posture, as these hashes could be cracked offline, granting attackers administrative access to the device.</p> <p>The 2wcom IP-4c 2.15.5 device&#39;s web interface includes an information disclosure vulnerability. By sending a crafted POST request to a specific endpoint (/cwi/ajax_request/get_data.php), an authenticated attacker (even with a low-privileged account like guest) can retrieve the hashed passwords for the admin, manager, and guest accounts. This significantly weakens the system&#39;s security posture, as these hashes could be cracked offline, granting attackers administrative access to the device.</p> https://cve.radiocsirt.org/vuln/cve-2025-57433