CWE Code: 798
Vulnerability Type: privilege_escalation
CVSS Score: 6.0
CWE Name:  Use of Hard-coded Credentials
Summary: the web application backup file in the tp-link eap controller and omada controller versions 2.5.4_windows/2.6.0_windows is encrypted with a hard-coded cryptographic key, so anyone who knows that key and the algorithm can decrypt it. a low-privilege user could decrypt and modify the backup file in order to elevate their privileges. this is fixed in version 2.6.1_windows.
Access Authentication: SINGLE
Access Complexity: MEDIUM
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2018-05-03
Last Modified Date: 2018-06-12