PT-2017-17132

Name of the Vulnerable Software and Affected Versions Televes COAXDATA GATEWAY 1Gbps devices version doc-wifi-hgw v1.02.0014 4.20 Description The issue concerns the lack of password.shtml authorization checks, allowing for arbitrary password changes. Recommendations For version doc-wifi-hgw...

CVE-2017-6531: Undefined Security Weakness

On Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgwv1.02.0014 4.20, the backup/restore feature lacks access control, related to ReadFile.cgi and LoadCfgFile...

CVE-2017-6532: Insufficiently Protected Credentials

Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgwv1.02.0014 4.20 have cleartext credentials in /mib.db...

CVE-2017-6530: Improper Authentication

Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgwv1.02.0014 4.20 do not check password.shtml authorization, leading to Arbitrary password change...