CyberRota Analysis
AI-GeneratedThe vulnerability affects the DDNS Handler in Netcore NR268 version 1.7.121109, where improper handling of the user_idN and passwordN arguments in the ddns_wan_list_show function can lead to information disclosure. This issue can be exploited remotely, potentially exposing sensitive information to attackers. Organizations using this specific version of the Netcore NR268 should prioritize remediation, especially if they handle sensitive data through their DDNS services.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability has been found in Netcore NR268 1.7.121109. The impacted element is the function ddns_wan_list_show of the file ddns_wan_list_show.cgi of the component DDNS Handler. The manipulation of the argument user_idN/passwordN leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.