NetMan 204 vulnerabilities
6 known vulnerabilities in NetMan 204 from Riello-ups. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
NetMan 204: Missing Authentication for Critical Functionality
NetMan 204 fails to enforce authentication on its administrative pages and command endpoints. A remote, unauthenticated attacker can directly request administrative pages (such as administration.html, administration-commands.html, and configuration.html) to di
- 9.8 Critical severity
NetMan 204: Use of Hard-coded Credentials
NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative access. A remote, unauthenticated attacker can authenticate through the cgi-bin/login.cgi endpoint (for example /cgi-bin/login.cgi?username=eure
- 9.8 Critical severity
Netman-204: Unrestricted Upload of File with Dangerous Type
There is a remote code execution vulnerability that affects all versions of NetMan 204. A remote attacker could upload a firmware file containing a webshell, that could allow him to execute arbitrary code as root.
- 7.5 High severity
Netman-204: Cleartext Transmission of Sensitive Information
All versions of NetMan 204 could allow an unauthenticated remote attacker to read a file (config.cgi) containing sensitive information, like credentials.
- 8.8 High severity
Netman-204: Use of Hard-coded Credentials
All versions of NetMan 204 allow an attacker that knows the MAC and serial number of the device to reset the administrator password via the legitimate recovery function.
- 8.8 High severity
Netman-204: Cross-Site Request Forgery
There is a CSRF vulnerability on Netman-204 version 02.05. An attacker could manage to change administrator passwords through a Cross Site Request Forgery due to the lack of proper validation on the CRSF token. This vulnerability could allow a remote attacker