VULNERABILITY INTELLIGENCE
CVE-2018-12260
CVSS score6.7 MEDIUM
EPSS probability0.37%
CISA KEVNot currently listed
Published2018-06-12
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Description
An issue was discovered on Momentum Axel 720P 5.1.8 devices. The root password can be obtained in cleartext by issuing the command 'showKey' from the root CLI. This password may be the same on all devices
Weakness classification
- CWE-522: Insufficiently Protected Credentials
Primary references
- cve@mitre.org — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory