3 ms·
This is bad, but all of those vulnerabilities required already authenticated requests. The examples here all rely on the default credentials still working. A
by justinsaccount 10y ago
This is bad, but all of those vulnerabilities required already authenticated requests. The examples here all rely on the default credentials still working.
A RCE via a malicious packet would be a lot more interesting.
- Sanddancer 10y agoIt's still amazingly easy to exploit through phishing, etc. Sending an email with a link to a controlled page, etc could easily get an authorized user to send the web request.