nepstech-xpon-router-CVE-2024-40119

nepstech-xpon-router-CVE-2024-40119 작성자: Subhodeep Baroi CVE-2024-40119: Nepstech Wifi Router NTPL-XPON1GFEVN v1.0의 CSRF 취약점 설명 CVE-2024-40119 은는 Nepstech Wifi Router xpon NTPL-XPON1GFEVN v1.0 펌웨어 v2.0.1의 CSRF교차 사이트 요청 위조 취약점입니다. 이 취약점을 통해 원격 공격자는 사용자의 동의 없이 관리자 비밀번호를 변경하여 잠재적인 계정 탈취로 이어질 수 있습니다...

CVE-2024-42658

CVE-2024-42658 CVE-2024-42658 wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0의 문제로, 원격 공격자가 cookies 매개변수를 통해 민감한 정보를 획득할 수 있습니다. CVE-2024-42658: 요약: wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0의 취약점으로 인해 인증되지 않은 원격 공격자가 쿠키 조작을 통해 민감한 정보를 획득할 수 있습니다. 이 문제는 쿠키에 대한 보안 조치가 충분하지 않아 발생하며, 민감한 정보...

CVE-2024-42657

CVE-2024-42657 CVE-2024-42657 wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0의 문제로, 로그인 과정에서 암호화가 부족하여 원격 공격자가 민감한 정보를 획득할 수 있습니다. CVE-2024-42657: 요약: wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0의 취약점으로, 인증되지 않은 원격 공격자가 로그인 과정 중 민감한 정보를 획득할 수 있습니다. 이 문제는 로그인 자격 증명을 전송할 때 암호화가 부족하여 발생하며, 중간...

CVE-2024-42658

An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the cookie's parameter...

CVE-2024-42657

An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the lack of encryption during login process...

CVE-2024-37855

An issue in Nepstech Wifi Router xpon terminal NTPL-Xpon1GFEVN, hardware verstion 1.0 firmware 2.0.1 allows a remote attacker to execute arbitrary code via the router's Telnet port 2345 without requiring authentication credentials...

CVE-2024-40119

Nepstech Wifi Router xpon terminal model NTPL-Xpon1GFEVN v.1.0 Firmware V2.0.1 contains a Cross-Site Request Forgery CSRF vulnerability in the password change function, which allows remote attackers to change the admin password without the user's consent, leading to a potential account takeover...

CVE-2024-42658

An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the cookie's parameter...

CVE-2024-42658

An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the cookie's parameter...

CVE-2024-42657

An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the lack of encryption during login process...

CVE-2024-42657

An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the lack of encryption during login process...

Nepstech NTPL-XPON1GFEVN 安全漏洞

The Nepstech NTPL-XPON1GFEVN is a wireless router from Nepstech. A security vulnerability exists in Nepstech NTPL-XPON1GFEVN v1.0. An attacker can exploit the vulnerability to obtain sensitive information via the parameters of a cookie...

Nepstech NTPL-XPON1GFEVN 安全漏洞

The Nepstech NTPL-XPON1GFEVN is a wireless router from Nepstech. A security vulnerability exists in Nepstech NTPL-XPON1GFEVN v1.0. An attacker can exploit the vulnerability to gain access to sensitive information...

CVE-2024-42657

An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the lack of encryption during login process...

CVE-2024-42658

An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the cookie's parameter...

CVE-2024-42658

CVE-2024-42658 affects wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0. The Red Hat/NVD entries and vendor references describe an information disclosure where a remote attacker can obtain sensitive data via the cookie parameter. The exact root cause details are not provided beyond the cookie pa...

CVE-2024-42658

An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the cookie's parameter...

CVE-2024-42657: Missing Encryption of Sensitive Data

An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the lack of encryption during login process...

CVE-2024-42658: Exposure of Sensitive Information to an Unauthorized Actor

An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the cookie's parameter...

CVE-2024-42657

An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the lack of encryption during login process...