WODESYS WD-R608U Router Plaintext Password Vulnerability

A vulnerability exists in the WODESYS WD-R608U router, also known as the WDR122B V2.0 and WDR28, where the admin password is stored in plaintext within the configuration file. This password can be accessed by an unauthorized user through direct references to the file. The issue has been confirmed in the WDR28081123OV1.01 version, while other versions may also be vulnerable.

Impact

Exploitation of this vulnerability allows unauthorized users to obtain the admin password in plaintext, potentially leading to unauthorized access to the router's administrative functions.