CVE-2017-6530

Televes COAXDATA GATEWAY 1Gbps devices (firmware referenced as doc-wifi-hgw_v1.02.0014 4.20) are affected by CVE-2017-6530 due to missing authorization on password change functionality (password.shtml), allowing arbitrary administrator password changes. Multiple sources (NVD/CNVD) describe this v...

CVE-2017-6531: Undefined Security Weakness

On Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgwv1.02.0014 4.20, the backup/restore feature lacks access control, related to ReadFile.cgi and LoadCfgFile...

CVE-2017-6532: Insufficiently Protected Credentials

Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgwv1.02.0014 4.20 have cleartext credentials in /mib.db...

CVE-2017-6530: Improper Authentication

Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgwv1.02.0014 4.20 do not check password.shtml authorization, leading to Arbitrary password change...