libmtk http-module Privilege Escalation

The vulnerability of the http-module in the libmtk MediaTek SDK routers, which operate based on WiMAX technology, is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to bypass the authentication process and gain access to the device wit...

CVE-2017-3216: Missing Authentication for Critical Function

WiMAX routers based on the MediaTek SDK libmtk that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote, unauthenticated attacker to gain administrator access to the device by performing an administrator password change on the device via a crafted POST request...

PT-2017-3109

Name of the Vulnerable Software and Affected Versions libmtk MediaTek SDK versions affected versions not specified Description The issue is related to weaknesses in the authentication procedure of the http module for libmtk, which is used in WiMAX routers based on the MediaTek SDK. This allows a...

Various WiMAX routers contain a authentication bypass vulnerability in custom libmtk httpd plugin

Overview WiMAX routers from several vendors making use of a custom httpd plugin for libmtk are vulnerable to an authentication bypass allowing a remote, unauthenticated attacker to change the administrator password on the device. Description CWE-306: Missing Authentication for Critical Function -...