CVE-2020-35757

An issue was discovered on Libre Wireless LS9 LS1.5/p7040 devices. There is Unauthenticated Root ADB Access Over TCP. The LS9 web interface provides functionality to access ADB over TCP. This is not enabled by default, but can be enabled by sending a crafted request to a web management interface endpoint. Requests made to this endpoint do not require authentication. As such, any unauthenticated user who is able to access the web interface will be able to gain root privileges on the LS9 module.

• CWE-306

• https://www.iot-inspector.com/blog/advisory-multiple-issues-libre-wireless-ls9/Exploit, Third Party Advisory
• https://www.iot-inspector.com/blog/advisory-multiple-issues-libre-wireless-ls9/Exploit, Third Party Advisory

Published

May 3, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-35749Directory traversal vulnerability in class-simple_job_board_…7.7
• CVE-2020-35752Baby Care System 1.0 is affected by a cross-site scripting (…5.4
• CVE-2020-35753The job posting recommendation form in Persis Human Resource…6.1
• CVE-2020-35754OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an a…7.2
• CVE-2020-35755An issue was discovered on Libre Wireless LS9 LS1.5/p7040 de…7.5
• CVE-2020-35756An issue was discovered on Libre Wireless LS9 LS1.5/p7040 de…7.5
• CVE-2020-35758An issue was discovered on Libre Wireless LS9 LS1.5/p7040 de…9.8
• CVE-2020-35759bloofoxCMS 0.5.2.1 is infected with a CSRF Attack that leads…6.5
• CVE-2020-35760bloofoxCMS 0.5.2.1 is infected with Unrestricted File Upload…9.8
• CVE-2020-35761bloofoxCMS 0.5.2.1 is infected with XSS that allows remote a…5.4
• CVE-2020-35762bloofoxCMS 0.5.2.1 is infected with Path traversal in the 'f…2.7
• CVE-2020-35765doFilter in com.adventnet.appmanager.filter.UriCollector in …8.8