CVE-2017-6530: Improper Authentication

Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgwv1.02.0014 4.20 do not check password.shtml authorization, leading to Arbitrary password change...

PT-2017-17134

Name of the Vulnerable Software and Affected Versions Televes COAXDATA GATEWAY 1Gbps version doc-wifi-hgw v1.02.0014 4.20 Description The issue concerns cleartext credentials stored in the /mib.db file. Recommendations For version doc-wifi-hgw v1.02.0014 4.20, consider restricting access to the...

CVE-2017-6531: Undefined Security Weakness

On Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgwv1.02.0014 4.20, the backup/restore feature lacks access control, related to ReadFile.cgi and LoadCfgFile...

PT-2017-17133

Name of the Vulnerable Software and Affected Versions Televes COAXDATA GATEWAY 1Gbps version doc-wifi-hgw v1.02.0014 4.20 Description The issue is related to the backup/restore feature, which lacks access control. This is connected to the ReadFile.cgi and LoadCfgFile functions. Recommendations Fo...

CVE-2017-6532: Insufficiently Protected Credentials

Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgwv1.02.0014 4.20 have cleartext credentials in /mib.db...