Nepstech · Nepstech Wifi Router Xpon · CVE-2024-37855
**Name of the Vulnerable Software and Affected Versions**
Nepstech Wifi Router xpon (terminal) NTPL-Xpon1GFEVN, hardware version 1.0, firmware version 2.0.1
**Description**
The issue allows a remote attacker to execute arbitrary code via the router's Telnet port 2345 without requiring authentication credentials.
**Recommendations**
For Nepstech Wifi Router xpon (terminal) NTPL-Xpon1GFEVN, hardware version 1.0, firmware version 2.0.1, consider disabling access to the Telnet port 2345 until a patch is available.