漏洞类别:CGI
漏洞等级:
漏洞信息
The target is determined to be a pfSense device, pfSense is an open source firewall or router computer software distribution based on FreeBSD.
The admin interface of pfSense is accessible using default credentials - admin:pfsense.
QID Detection Logic (Remote): Detection uses default credentials (admin:pfsense) to login to the web interface.
漏洞危害
Successfully exploiting this issue may allow attackers to obtain administrative access to the device.
解决方案
Customers are advised to change the default passwords.
0daybank
文章评论