PT-2024-30094 · Wishnet Nepstech · Ntpl-Xpon1Gfevn

Published 2024-08-16 · Updated 2024-08-23 · CVE-2024-42657

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Wishnet Nepstech Wifi Router NTPL-XPON1GFEVN version 1.0

Description An issue in the Wifi Router allows a remote attacker to obtain sensitive information via the lack of encryption during the login process.

Recommendations For version 1.0, as a temporary workaround, consider disabling the login process until a patch is available. Restrict access to the router to minimize the risk of exploitation. Avoid using the router until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Missing Encryption of Sensitive Data

Information Disclosure

Weakness Enumeration

CWE-311

CWE-200

Related Identifiers

CVE-2024-42657

Affected Products

Ntpl-Xpon1Gfevn

References · 11

• 🔥 https://github.com/sudo-subho/CVE-2024-42657 · Exploit
• https://osv.dev/vulnerability/CVE-2024-42657 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-42657 · Security Note
• https://twitter.com/cracbot/status/1826862057146515828 · Twitter Post
• https://twitter.com/sudo_subho/status/1825749786537955808 · Twitter Post
• https://x.com/sudo_subho · Note
• https://t.me/cvedetector/3535 · Telegram Post
• https://linkedin.com/in/subhodeep-baroi-397629252 · Note
• https://twitter.com/CVEnew/status/1825582331240849666 · Twitter Post
• https://twitter.com/cracbot/status/1827224397733884275 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1824649065658757262 · Twitter Post