Threats tagged 'ghsa-mmm6-v93x-r6rc'

A critical vulnerability exists in Qihoo 360 Whole Home Router M5 version 4.0.17.1566. The flaw is in the Boot Script component, specifically the Home function of /etc/init.d/mpt, which leads to hard-coded credentials. This vulnerability allows remote attackers to exploit the device without authentication. Public exploit code is available, increasing the risk of exploitation. The vendor was notified but has not responded or provided a fix.