67 matches found
Fastweb Fastgate 0.00.81 - Remote Code Execution
Fastweb Fastgate 0.00.81 - Remote Code Execution Exploit Title: Fastweb Fastgate 0.00.81 - Remote Code Execution Date: 2019-11-13 Exploit Author: Riccardo Gasparini Vendor Homepage: https://www.fastweb.it/ Software Link: http://59.0.121.191:8080/ACS-server/file/0.00.81FW200Askey only from Fastweb...
Fastweb Fastgate 0.00.81 - Remote Code Execution
Exploit Title: Fastweb Fastgate 0.00.81 - Remote Code Execution Date: 2019-11-13 Exploit Author: Riccardo Gasparini Vendor Homepage: https://www.fastweb.it/ Software Link: http://59.0.121.191:8080/ACS-server/file/0.00.81FW200Askey only from Fastweb ISP network Version: 0.00.81 Tested on: Linux CV...
Fastweb FASTGate Information Disclosure Vulnerability
Fastweb FASTGate is a modem from Fastweb Italy. An information disclosure vulnerability exists in Fastweb FASTGate version 1.0.1b, which can be exploited to view all web pages of the management console by changing the checkpwd return value from 0 to 1...
CVE-2019-18661
Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain checkpwd return value from 0 to 1. An attack does not achieve administrative control of a device; however, the attacker can view all of the web pages of the administration console...
Authentication flaw
Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain checkpwd return value from 0 to 1. An attack does not achieve administrative control of a device; however, the attacker can view all of the web pages of the administration console...
CVE-2019-18661
Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain checkpwd return value from 0 to 1. An attack does not achieve administrative control of a device; however, the attacker can view all of the web pages of the administration console...
CVE-2019-18661
Fastweb FASTGate 1.0.1b is affected by an authentication bypass where a check_pwd return value can be altered from 0 to 1, enabling an attacker to view all pages of the administration console without achieving full administrative control. Root cause involves partial bypass of authentication; no e...
PT-2019-15562
Name of the Vulnerable Software and Affected Versions Fastweb FASTGate version 1.0.1b Description The issue allows for partial authentication bypass by modifying a certain check pwd return value from 0 to 1. Although an attack does not grant administrative control of a device, it enables the...
CVE-2019-18661: Improper Authentication
Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain checkpwd return value from 0 to 1. An attack does not achieve administrative control of a device; however, the attacker can view all of the web pages of the administration console...
Command injection
The web interface on FASTGate Fastweb devices with firmware through 0.00.47FW200Askey 2017-05-17 software through 1.0.1b exposed a CGI binary that is vulnerable to a command injection vulnerability that can be exploited to achieve remote code execution with root privileges. No authentication is...
CVE-2018-20122
The web interface on FASTGate Fastweb devices is vulnerable to a command injection flaw in a CGI binary. This vulnerability, identified as CWE-78 , allows an unauthenticated attacker to achieve remote code execution with root privileges . The issue affects devices with firmware through 0.00.47_FW...
CVE-2018-20122
The web interface on FASTGate Fastweb devices with firmware through 0.00.47FW200Askey 2017-05-17 software through 1.0.1b exposed a CGI binary that is vulnerable to a command injection vulnerability that can be exploited to achieve remote code execution with root privileges. No authentication is...
CVE-2018-20122: Improper Neutralization of Special Elements used in an OS Command
The web interface on FASTGate Fastweb devices with firmware through 0.00.47FW200Askey 2017-05-17 software through 1.0.1b exposed a CGI binary that is vulnerable to a command injection vulnerability that can be exploited to achieve remote code execution with root privileges. No authentication is...
PT-2019-9997
Name of the Vulnerable Software and Affected Versions FASTGate Fastweb devices with firmware through 0.00.47 FW 200 Askey 2017-05-17 FASTGate Fastweb devices with software through 1.0.1b Description The web interface on FASTGate Fastweb devices exposed a CGI binary that is vulnerable to a command...
Fastweb FASTGate modem unauthorized remote command execution vulnerability
Fastweb is a subnet of Swisscom, the main fixed line operator in Italy, and FASTGate is Fastweb's latest generation of modems. FASTGate is Fastweb's latest generation of modems. An unauthorized remote command execution vulnerability exists in the Fastweb FASTGate modem. An attacker can execute...
Fastweb FASTgate Cross-Site Request Forgery Vulnerability
The Fastweb FASTgate is a router device from the Italian company Fastweb. A cross-site request forgery vulnerability exists in Fastweb FASTgate version 0.00.47. A remote attacker can exploit this vulnerability to change the configuration, e.g., change the Wi-Fi password...
CVE-2018-6023
Fastweb FASTgate 0.00.47 devices are vulnerable to CSRF, with impacts including Wi-Fi password changing, Guest Wi-Fi activating, etc...
Cross site request forgery (csrf)
Fastweb FASTgate 0.00.47 devices are vulnerable to CSRF, with impacts including Wi-Fi password changing, Guest Wi-Fi activating, etc...
CVE-2018-6023
Affected product: Fastweb FASTgate 0.00.47 router. Vulnerability: Cross-site request forgery (CSRF) that allows attackers to modify configuration, including changing the Wi‑Fi password and activating Guest Wi‑Fi. Root cause: CSRF in the device’s web interface enabling unauthorized authenticated a...