CVE-2018-18377 goform/setReset on Orange AirBox Y858_FL_01.16_04 devices allows attackers to reset a router to factory settings, which can be used to login using the default admin:admin credentials.
HighCVSS 7.5
EPSS 0.92%
- Published
- Updated
- Exploit status
- No public exploit known
Description
goform/setReset on Orange AirBox Y858_FL_01.16_04 devices allows attackers to reset a router to factory settings, which can be used to login using the default admin:admin credentials.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| orange airbox firmware | = y858_fl_01.16_04 | No fix listed |
References
- github.com exploit technical-description