Exploitation Summary
EIP tracks 1 public exploit for CVE-2019-25470. PoCs published by Photubias.
AI-analyzed exploit summary This exploit bypasses authentication on eWON Flexy routers (firmware 12.2 to 13.0) by leveraging a weak password encryption mechanism to retrieve cleartext credentials. It requires a valid username (default 'adm') and combines an authentication bypass with a password decryption vulnerability.
Description
eWON Firmware versions 12.2 to 13.0 contain an authentication bypass vulnerability that allows attackers with minimal privileges to retrieve sensitive user data by exploiting the wsdReadForm endpoint. Attackers can send POST requests to /wrcgi.bin/wsdReadForm with base64-encoded partial credentials and a crafted wsdList parameter to extract encrypted passwords for all users, which can be decrypted using a hardcoded XOR key.
Exploits (1)
This exploit bypasses authentication on eWON Flexy routers (firmware 12.2 to 13.0) by leveraging a weak password encryption mechanism to retrieve cleartext credentials. It requires a valid username (default 'adm') and combines an authentication bypass with a password decryption vulnerability.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N