maen08 / CVE-2024-25277

Resources and PoCs

CVE-2024-25277 discovered on MW45A_PT_02.00_02

Resources and PoCs

• This repo serves as collection of scripts and PoCs gathered during analysis and discovery of CVE-2024-25277.
• You can read more about the finding on: https://blog.maentechie.com/bypass-rate-limiting-in-tcl-mw45ad-to-achieve-privileges-escalation

Summary of issues found

• Rate limit bypass
• Hardcoded tokens and keys
• Weak encryption
• Privileges escalation