CVE-2024-33375

LB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's firmware

Critical · published June 14, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
49.0
In the wild
Unconfirmed
What it is

🔥 User credentials are stored in plaintext in LB-LINK BL-W1210M v2.0 firmware! That's like leaving your house key under the welcome mat — inviting anyone to walk right in! 🚪 Think of it like a diary left wide open on a park bench. Anyone passing by can read your secrets without breaking a sweat. In this case, the router's firmware is that unlocked diary, revealing sensitive information to anyone with access. An attacker could easily scoop up usernames and passwords, gaining unauthorized access to your network. This could lead to a devastating breach, allowing manipulation of your devices, monitoring of your activities, and potential data theft. It's not just a matter of privacy; it could turn into a full-blown security crisis!

Put simply

Think of it like a diary left wide open on a park bench. Anyone passing by can read your secrets without breaking a sweat. In this case, the router's firmware is that unlocked diary, revealing sensitive information to anyone with access. This vulnerability occurs because the LB-LINK BL-W1210M v2.0 firmware saves user credentials in an unencrypted format, making it simple for attackers to read them if they gain access to the firmware.

What to do

An attacker could easily scoop up usernames and passwords, gaining unauthorized access to your network. This could lead to a devastating breach, allowing manipulation of your devices, monitoring of your activities, and potential data theft. It's not just a matter of privacy; it could turn into a full-blown security crisis! To mitigate this risk, immediately check for firmware updates from LB-LINK and apply them if available. If no patch is available, consider replacing the device or implementing additional network security measures, like using a VPN to obscure your traffic. 🔒 You've got this! By taking action now, you can safeguard your network and keep those credentials out of prying eyes! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00619 · 49.0th percentile
Published
2024-06-14T00:00Z
EPSS history
Timeline
  • 14 JUN 00:00Z
    LB-LINK BL-W1210M v2.0 was discovered to store user credentials in plaintext within the router's firmware
    cvelistv5