CVE-2018-8755

NuCom WR644GACV devices before STA006 allow an attacker to download the configuration file without credentials

published June 25, 2018

CVSS
—
EPSS
1%
Percentile
64.9
In the wild
Unconfirmed
What it is

🚨 A configuration file is just an open door! With CVE-2018-8755, an attacker can download sensitive details from NuCom WR644GACV devices without any credentials, like a thief walking into a house with the door wide open! It's like leaving your house key under the welcome mat while you go on vacation — anyone can stroll right in and access everything. This vulnerability lets attackers pull down configuration files and find your admin password and WPA key with no effort at all! Imagine a hacker accessing your home network settings and Wi-Fi password, leaving your entire network vulnerable to further attacks. This breach could lead to unauthorized access to all of your connected devices and sensitive data — absolutely devastating!

Put simply

It's like leaving your house key under the welcome mat while you go on vacation — anyone can stroll right in and access everything. This vulnerability lets attackers pull down configuration files and find your admin password and WPA key with no effort at all! This vulnerability allows attackers to download the configuration file from NuCom WR644GACV devices prior to STA006 without needing any credentials, exposing critical information like admin credentials and network configuration.

What to do

Imagine a hacker accessing your home network settings and Wi-Fi password, leaving your entire network vulnerable to further attacks. This breach could lead to unauthorized access to all of your connected devices and sensitive data — absolutely devastating! To secure your devices, make sure to update to the latest firmware version that addresses this vulnerability. Consider changing your passwords immediately, and review your network security settings to ensure they are as robust as possible. You’ve got this! By taking these steps, you'll enhance your security and keep your network safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01082 · 64.9th percentile
Published
2018-06-25T15:00Z
EPSS history
Timeline
  • 25 JUN 15:00Z
    NuCom WR644GACV devices before STA006 allow an attacker to download the configuration file without credentials
    cvelistv5