CVE-2020-37093: Netis E1+ 1.2.32533 - Unauthenticated WiFi Password Leak
Netis E1+ 1.2.32533 contains an information disclosure vulnerability that allows unauthenticated attackers to retrieve WiFi passwords through the netcoreget.cgi endpoint. Attackers can send a GET request to the endpoint to extract sensitive network credentials including SSID and WiFi passwords in plain text.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-37093?
CVE-2020-37093 is considered a high severity vulnerability due to the potential for unauthorized access to sensitive WiFi credentials.
How do I fix CVE-2020-37093?
To fix CVE-2020-37093, it is recommended to update the firmware of the Netis E1+ router to the latest version provided by the vendor.
Can CVE-2020-37093 be exploited remotely?
Yes, CVE-2020-37093 can be exploited remotely by sending a GET request to the vulnerable netcore_get.cgi endpoint.
What type of information does CVE-2020-37093 expose?
CVE-2020-37093 exposes sensitive WiFi passwords, allowing attackers to gain unauthorized access to the wireless network.
Who is affected by CVE-2020-37093?
CVE-2020-37093 affects users of the Netis E1+ router running firmware version 1.2.32533.