WiFiRanger 7.0.8rc3 Incorrect Access Control / Privilege Escalation

WiFiRanger version 7.0.8rc3 suffers from an incorrect access control that allows for ftp retrieval of an RSA identity that an attacker can use to ssh in as root.

Continue reading...