CVE-2014-9303
EntryPass N5200 Active Network Control Panel - Unauthenticated Exposure of Sensitive Information via URL Character Range
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2014-9303. PoCs published by RedTeam Pentesting.
AI-analyzed exploit summary This advisory details an information disclosure vulnerability in EntryPass N5200 Active Network Control Panels, where unauthenticated attackers can retrieve memory contents containing administrative credentials via specific URL requests. The vulnerability arises from improper handling of URL paths, allowing access to sensitive data.
Description
EntryPass N5200 Active Network Control Panel allows remote attackers to read device memory and obtain the administrator username and password via a URL starting with an ASCII character o through z or A through D, different vectors than CVE-2014-8868.
Exploits (1)
This advisory details an information disclosure vulnerability in EntryPass N5200 Active Network Control Panels, where unauthenticated attackers can retrieve memory contents containing administrative credentials via specific URL requests. The vulnerability arises from improper handling of URL paths, allowing access to sensitive data.