cve/2024/CVE-2024-44815.md

CVE-2024-44815

Description

Vulnerability in Hathway Skyworth Router CM5100 v.4.1.1.24 allows a physically proximate attacker to obtain user credentials via SPI flash Firmware W25Q64JV.

POC

Reference

• https://github.com/nitinronge91/Extracting-User-credentials-For-Web-portal-and-WiFi-AP-For-Hathway-Router-CVE-2024-44815-

Github

• https://github.com/fkie-cad/nvd-json-data-feeds
• https://github.com/nitinronge91/Extracting-User-credentials-For-Web-portal-and-WiFi-AP-For-Hathway-Router-CVE-2024-44815-
• https://github.com/nomi-sec/PoC-in-GitHub