EDB-44515
PoCEricsson-LG iPECS NMS A.1Ac - Cleartext Credential Disclosure
view exploit source exploit_dbtype webappsauthor Berk Cem Gökselpublished 2018-04-24catalog exploit_db
01
exploited CVEs (3)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-9245US | critical9.8 | Exploit | ||
The Ericsson-LG iPECS NMS A.1Ac login portal has a SQL injection vulnerability in the User ID and password fields that allows users to bypass the login page and execute remote code… | ||||
| CVE-2018-10286US | high8.8 | Exploit | ||
The Ericsson-LG iPECS NMS A.1Ac web application discloses sensitive information such as the NMS admin credentials and the PostgreSQL database credentials to logged-in users via the… | ||||
| CVE-2018-10285US | critical9.8 | Exploit | ||
The Ericsson-LG iPECS NMS A.1Ac web application uses incorrect access control mechanisms. Since the app does not use any sort of session ID, an attacker might bypass authentication… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan