BEC Technologies Routers Insufficiently Protected Credentials Information Disclosure Vulnerability

A vulnerability exists in multiple BEC Technologies routers, allowing network-adjacent attackers to disclose sensitive information. This issue arises from the /cgi-bin/tools_usermanage.asp endpoint, which transmits a list of users and their credentials to be processed on the client side. As a result, an attacker could intercept and access these credentials, potentially leading to further exploitation.

Impact

Exploitation of this vulnerability allows for the interception and disclosure of user credentials, which could be used to compromise affected systems.