Início
Tendências
Vulnerabilidades
Notícias
Pesquisadores
Por que dbugs?

Angeloanatrella86

#35400de 53,640
7.5CVSS total
Vulnerabilidades · 1
PT-2019-15562
7.5
2019-11-02
Fastweb · Fastgate · CVE-2019-18661
**Name of the Vulnerable Software and Affected Versions** Fastweb FASTGate version 1.0.1b **Description** The issue allows for partial authentication bypass by modifying a certain `check pwd` return value from 0 to 1. Although an attack does not grant administrative control of a device, it enables the attacker to view all web pages of the administration console. **Recommendations** For Fastweb FASTGate version 1.0.1b, consider modifying the `check pwd` function to prevent return value manipulation until a patch is available. Restrict access to the administration console to minimize the risk of exploitation.