Twenty Year Anniversary

Sagem Fast 3304-V2 Credential Disclosure

Sagem Fast 3304-V2 Credential Disclosure
Posted Nov 14, 2016
Authored by Nassim Asrir

Sagem Fast 3304-V2 suffers from a credential disclosure vulnerability.

tags | exploit, info disclosure
MD5 | 5fb8286d925f34de7ef13b52b56339e0

Sagem Fast 3304-V2 Credential Disclosure

Change Mirror Download
Exploit title: FAST3304v2 Credentials Disclosure vulnerability

Author: Nassim Asrir

Author Company: HenceForth

Author Email: wassline@gmail.com

Discovered on: 13/11/2016

Tested on: Linux x86_64 / Mozilla Firefox 49.

Tested Version: Sagem Fast 3304-V2 (other versions may also be affected)

Vendor: http://www.sagemcom.com/

Description :

- Sagem Fast 3304-v2 router is vulnerable to a Remote Credentials
Disclosure Vulnerability . This vulnerability allow to a remote
attacker to get the login and password for any services in the
router (Ex: USB Share)

Proof:
- The Sagem fast 3304-v2 router has a service (USB Share) this
service allow to share Folder or Pics or in Local Network (LAN)
and for see the shared folders you need the login credentials from
the Admin . So we can get it just with a javascript code.

1- Navigate The router Login Page (192.168.1.1).

2- Inject the Javascript Code in searchbar: javascript:mimic_button('sidebar:
%20lb_sidebar_advanced_memory_sharing..', 0)

3- Now you can see the login credentials:

* The host to see shared folders is 192.168.1.1

4- and now we get the login and pass but the pass is unclear so just click in (CTRL + u ) to see

the source code and click in (CTRL + f) and put in the

search box (password) and you can see the value for password clear.

Comments

RSS Feed Subscribe to this comment feed

No comments yet, be the first!

Login or Register to post a comment

Want To Donate?


Bitcoin: 18PFeCVLwpmaBuQqd5xAYZ8bZdvbyEWMmU

File Archive:

July 2018

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jul 1st
    1 Files
  • 2
    Jul 2nd
    26 Files
  • 3
    Jul 3rd
    15 Files
  • 4
    Jul 4th
    11 Files
  • 5
    Jul 5th
    13 Files
  • 6
    Jul 6th
    4 Files
  • 7
    Jul 7th
    4 Files
  • 8
    Jul 8th
    1 Files
  • 9
    Jul 9th
    16 Files
  • 10
    Jul 10th
    15 Files
  • 11
    Jul 11th
    32 Files
  • 12
    Jul 12th
    22 Files
  • 13
    Jul 13th
    15 Files
  • 14
    Jul 14th
    1 Files
  • 15
    Jul 15th
    1 Files
  • 16
    Jul 16th
    21 Files
  • 17
    Jul 17th
    15 Files
  • 18
    Jul 18th
    15 Files
  • 19
    Jul 19th
    17 Files
  • 20
    Jul 20th
    0 Files
  • 21
    Jul 21st
    0 Files
  • 22
    Jul 22nd
    0 Files
  • 23
    Jul 23rd
    0 Files
  • 24
    Jul 24th
    0 Files
  • 25
    Jul 25th
    0 Files
  • 26
    Jul 26th
    0 Files
  • 27
    Jul 27th
    0 Files
  • 28
    Jul 28th
    0 Files
  • 29
    Jul 29th
    0 Files
  • 30
    Jul 30th
    0 Files
  • 31
    Jul 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2018 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close