CyberRota Analysis
AI-GeneratedA vulnerability in LB-LINK X-PRO 1.0.22-20231206 allows for the manipulation of hard-coded credentials within the /etc/config/easycwmp file, potentially enabling remote attacks. The complexity of the exploit is high, but it has been publicly disclosed, increasing the risk of exploitation. Organizations using this product should prioritize remediation efforts to mitigate potential unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security flaw has been discovered in LB-LINK X-PRO 1.0.22-20231206. This affects an unknown function of the file /etc/config/easycwmp. The manipulation results in hard-coded credentials. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability is reported as difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.