CVE-2017-11645: Improper Authentication

NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 do not require authentication for logfile.html, status.html, or systemconfig.html...

PT-2017-12144

Name of the Vulnerable Software and Affected Versions NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 Description The issue concerns the lack of authentication for certain web pages, specifically logfile.html, status.html, and system config.html. This...

PT-2017-12146

Name of the Vulnerable Software and Affected Versions NetComm Wireless 4GT101W version V1.1.8.8 Description The issue allows for stored cross-site scripting attacks. By creating an SSID with an XSS payload, an attacker can successfully exploit this issue. Recommendations For version V1.1.8.8, avo...

CVE-2017-11646: Cross-Site Request Forgery (CSRF)

NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to CSRF attacks, as demonstrated by using administration.html to disable the firewall. They does not contain any token that can mitigate CSRF vulnerabilities within the device...

CVE-2017-11647: Improper Neutralization of Input During Web Page Generation

NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to stored cross-site scripting attacks. Creating an SSID with an XSS payload results in successful exploitation...

PT-2017-12145

Name of the Vulnerable Software and Affected Versions NetComm Wireless 4GT101W version V1.1.8.8 Description The issue allows for CSRF attacks, as demonstrated by using the administration.html page to disable the firewall. This is possible because the device does not contain any token that can...