PT-2024-28788 · Nepstech · Nepstech Wifi Router Xpon

Name of the Vulnerable Software and Affected Versions: Nepstech Wifi Router xpon terminal model NTPL-Xpon1GFEVN version 1.0 Firmware V2.0.1 Description: The issue concerns a Cross-Site Request Forgery CSRF vulnerability in the password change function. This allows remote attackers to change the...

PT-2024-27785 · Nepstech · Nepstech Wifi Router Xpon

Name of the Vulnerable Software and Affected Versions: Nepstech Wifi Router xpon terminal NTPL-Xpon1GFEVN, hardware version 1.0, firmware version 2.0.1 Description: The issue allows a remote attacker to execute arbitrary code via the router's Telnet port 2345 without requiring authentication...