PT-2017-12144 · Netcomm Wireless · Netcomm Wireless 4Gt101W

Publicado 2017-07-28 · Atualizado 2017-08-04 · CVE-2017-11645

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3

Description The issue concerns the lack of authentication for certain web pages, specifically logfile.html, status.html, and system config.html. This could potentially allow unauthorized access to sensitive information.

Recommendations For NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3, consider restricting access to the vulnerable web pages, such as logfile.html, status.html, and system config.html, until a patch or fix is available. As a temporary workaround, limit access to these pages to minimize the risk of exploitation.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2017-11645

Produtos afetados

Netcomm Wireless 4Gt101W

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-11645 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-11645 · Aviso do Fabricante
• https://iscouncil.blogspot.com/2017/07/access-violation-vulnerability-in.html · Nota