Threats tagged 'ghsa-wxj8-443r-hmmr'

A vulnerability exists in the firmware of a device where the TLS certificate and private key used for securing the web interface (TCP port 443) are hard-coded and shipped with update files. This private key is accessible in the filesystem and cannot be replaced or customized by users. An attacker with access to this key can perform man-in-the-middle attacks against users accessing the admin interface.