Genexis B.V. · Gaps · CVE-2017-6094
**Name of the Vulnerable Software and Affected Versions**
Genexis B.V. GAPS versions up to 7.2
**Description**
The issue allows for the forgery of valid `chk` values for any given MAC address, enabling the reception of configuration settings of other subscribers' CPEs. These settings often contain sensitive information, such as credentials (`username`/`password`) for VoIP services.
**Recommendations**
For Genexis B.V. GAPS versions up to 7.2, update to a version later than 7.2 to resolve the issue.