Lucene search

MitreCVE-2024-42658

HistoryAug 19, 2024 - 5:15 p.m.

CVE-2024-42658

2024-08-1917:15:08

CWE-200

mitre

web.nvd.nist.gov

nepstech

wifi router

remote attacker

sensitive information

cookie parameter

cve-2024-42658

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

28.0%

JSON

An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the cookie’s parameter

Affected configurations

Nvd

Node

nepstechntpl-xpon1gfevn_firmwareMatch1.0

AND

nepstechntpl-xpon1gfevnMatch-

VendorProductVersionCPE
nepstechntpl-xpon1gfevn_firmware1.0cpe:2.3:o:nepstech:ntpl-xpon1gfevn_firmware:1.0:*:*:*:*:*:*:*
nepstechntpl-xpon1gfevn-cpe:2.3:h:nepstech:ntpl-xpon1gfevn:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
nepstech	ntpl-xpon1gfevn_firmware	1.0	cpe:2.3:o:nepstech:ntpl-xpon1gfevn_firmware:1.0:::::::*
nepstech	ntpl-xpon1gfevn	-	cpe:2.3:h:nepstech:ntpl-xpon1gfevn:-:::::::*

References

github.com/sudo-subho/CVE-2024-42658

www.linkedin.com/in/subhodeep-baroi-397629252/

x.com/sudo_subho

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

6.5

Confidence

Low

EPSS

0.001

Percentile

28.0%

JSON

Related for CVE-2024-42658