CVE-2018-12260
Summary
| CVE | CVE-2018-12260 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-06-12 18:29:00 UTC |
| Updated | 2019-10-03 00:03:00 UTC |
| Description | An issue was discovered on Momentum Axel 720P 5.1.8 devices. The root password can be obtained in cleartext by issuing the command 'showKey' from the root CLI. This password may be the same on all devices |
Risk And Classification
Problem Types: CWE-522
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Apollotechnologiesinc | Momentum Axel 720p | - | All | All | All |
| Hardware | Apollotechnologiesinc | Momentum Axel 720p | - | All | All | All |
| Operating System | Apollotechnologiesinc | Momentum Axel 720p Firmware | 5.1.8 | All | All | All |
| Operating System | Apollotechnologiesinc | Momentum Axel 720p Firmware | 5.1.8 | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| rchase.com/downloads/momentum-iot-penetration-test-report.pdf | MISC | rchase.com | Exploit, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.