Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2017-3216
HistoryJun 20, 2017 - 12:29 a.m.

CVE-2017-3216

2017-06-2000:29:00
CWE-306
[email protected]
web.nvd.nist.gov
4

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.008

Percentile

81.1%

JSON

WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote, unauthenticated attacker to gain administrator access to the device by performing an administrator password change on the device via a crafted POST request.

Affected configurations

Nvd
Node
greenpacketox350_firmwareMatch-
AND
greenpacketox350Match-
Node
huaweibm2022_firmwareMatch-
AND
huaweibm2022Match-
Node
huaweihes-309m_firmwareMatch-
AND
huaweihes-309mMatch-
Node
huaweihes-319m_firmwareMatch-
AND
huaweihes-319mMatch-
Node
huaweihes-319m2w_firmwareMatch-
AND
huaweihes-319m2wMatch-
Node
huaweihes-339m_firmwareMatch-
AND
huaweihes-339mMatch-
Node
madasoho_wireless_router_firmwareMatch-
AND
madasoho_wireless_routerMatch-
Node
zteox-330p_firmwareMatch-
AND
zteox-330pMatch-
Node
zyxelmax218m_firmwareMatch-
AND
zyxelmax218mMatch-
Node
zyxelmax218m1w_firmwareMatch-
AND
zyxelmax218m1wMatch-
Node
zyxelmax218mw_firmwareMatch-
AND
zyxelmax218mwMatch-
Node
zyxelmax308m_fimwareMatch-
AND
zyxelmax308mMatch-
Node
zyxelmax318m_firmwareMatch-
AND
zyxelmax318mMatch-
Node
zyxelmax338m_firmwareMatch-
AND
zyxelmax338mMatch-
VendorProductVersionCPE
greenpacketox350_firmware-cpe:2.3:o:greenpacket:ox350_firmware:-:*:*:*:*:*:*:*
greenpacketox350-cpe:2.3:h:greenpacket:ox350:-:*:*:*:*:*:*:*
huaweibm2022_firmware-cpe:2.3:o:huawei:bm2022_firmware:-:*:*:*:*:*:*:*
huaweibm2022-cpe:2.3:h:huawei:bm2022:-:*:*:*:*:*:*:*
huaweihes-309m_firmware-cpe:2.3:o:huawei:hes-309m_firmware:-:*:*:*:*:*:*:*
huaweihes-309m-cpe:2.3:h:huawei:hes-309m:-:*:*:*:*:*:*:*
huaweihes-319m_firmware-cpe:2.3:o:huawei:hes-319m_firmware:-:*:*:*:*:*:*:*
huaweihes-319m-cpe:2.3:h:huawei:hes-319m:-:*:*:*:*:*:*:*
huaweihes-319m2w_firmware-cpe:2.3:o:huawei:hes-319m2w_firmware:-:*:*:*:*:*:*:*
huaweihes-319m2w-cpe:2.3:h:huawei:hes-319m2w:-:*:*:*:*:*:*:*
Rows per page:
1-10 of 281

Related

cvelist 1
prion 1
cert 1
cve 1
myhack58 1
threatpost 1
cvelist
cvelist
CVE-2017-3216
2017-06-20 00:00:00
prion
prion
Authentication flaw
2017-06-20 00:29:00
cert
cert
Various WiMAX routers contain a authentication bypass vulnerability in custom libmtk httpd plugin
2017-06-07 00:00:00
cve
cve
CVE-2017-3216
2017-06-20 00:29:00
myhack58
myhack58
Ghost to reproduce: part of the WiMAX routing device to authenticate the existence of the bypass and back door vulnerability-vulnerability warning-the black bar safety net
2017-06-13 00:00:00
threatpost
threatpost
Authentication Bypass, Potential Backdoors Plague Old WiMAX Routers
2017-06-08 09:00:17

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.008

Percentile

81.1%

JSON
Related for NVD:CVE-2017-3216
cvelist1prion1cert1cve1myhack581threatpost1