CyberRota Analysis
AI-GeneratedThe iDirect iQ200 VSAT terminal is vulnerable due to an endpoint that exposes the complete device configuration in JSON format, revealing sensitive information, including MD5-crypt password hashes for root SSH and web administration accounts. This flaw allows authenticated users to extract these hashes and potentially compromise the device by cracking them offline. Organizations using this terminal should prioritize addressing this vulnerability to protect against unauthorized access and potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The endpoint on the iDirect iQ200 VSAT terminal returns the complete device configuration as JSON, including the SECURITY section which contains MD5-crypt password hashes for the root SSH and web administration accounts. Any user with valid web credentials can extract these hashes and crack them offline using commodity hardware.