EDB-45942

PoC

NEC Univerge Sv9100 WebPro - 6.00 - Predictable Session ID / Clear Text Password Storage

view exploit source exploit_dbtype webappsauthor hyp3rlinxpublished 2018-12-04catalog exploit_db

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-11742US	critical9.8	14.3% (97th)	Exploit	2018-12-26
NEC Univerge Sv9100 WebPro 6.00.00 devices have Cleartext Password Storage in the Web UI.
CVE-2018-11741US	critical9.8	17.9% (97th)	Exploit	2018-12-26
NEC Univerge Sv9100 WebPro 6.00.00 devices have Predictable Session IDs that result in Account Information Disclosure via Home.htm?sessionId=#####&GOTO(8) URIs.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.