kbr / fritzconnection

Python-Tool to communicate with the AVM Fritz!Box by the TR-064 protocol and the AHA-HTTP-Interface
MIT License
304 stars 59 forks source link

Password leak in QR Code for an unencrypted connection. #225

Open derVedro opened 5 days ago

derVedro commented 5 days ago

Currently, old password is present in QR code even if the wi-fi network does not require encryption.

The following scenario is possible. You temporarily switch off the encryption for the previously encrypted network, generate a QR code, allow a new device to connect to the network and when everything is done, switch the encryption back on again. The new device can still connect to your network.

That's not good.