CVE-2024-40119

Nepstech Wifi Router xpon terminal model NTPL-Xpon1GFEVN v.1.0 Firmware V2.0.1 contains a Cross-Site Request Forgery CSRF vulnerability in the password change function, which allows remote attackers to change the admin password without the user's consent, leading to a potential account takeover...

CVE-2024-40119

Nepstech Wifi Router xpon terminal model NTPL-Xpon1GFEVN v.1.0 Firmware V2.0.1 contains a Cross-Site Request Forgery CSRF vulnerability in the password change function, which allows remote attackers to change the admin password without the user's consent, leading to a potential account takeover...

CVE-2024-40119

Nepstech Wifi Router xpon terminal model NTPL-Xpon1GFEVN v.1.0 Firmware V2.0.1 contains a Cross-Site Request Forgery CSRF vulnerability in the password change function, which allows remote attackers to change the admin password without the user's consent, leading to a potential account takeover...

CVE-2024-40119: Cross-Site Request Forgery (CSRF)

Nepstech Wifi Router xpon terminal model NTPL-Xpon1GFEVN v.1.0 Firmware V2.0.1 contains a Cross-Site Request Forgery CSRF vulnerability in the password change function, which allows remote attackers to change the admin password without the user's consent, leading to a potential account takeover...

CVE-2024-40119

The Nepstech Wifi Router xpon (terminal) (Model: NTPL-XPON1GFEVN , Version: 1.0 , Firmware: V2.0.1 ) is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability in its web application's password-changing functionality. A remote attacker can exploit this by tricking an authenticated user in...

PT-2024-28788 · Nepstech · Nepstech Wifi Router Xpon

Name of the Vulnerable Software and Affected Versions: Nepstech Wifi Router xpon terminal model NTPL-Xpon1GFEVN version 1.0 Firmware V2.0.1 Description: The issue concerns a Cross-Site Request Forgery CSRF vulnerability in the password change function. This allows remote attackers to change the...

CVE-2024-37855

An issue in Nepstech Wifi Router xpon terminal NTPL-Xpon1GFEVN, hardware verstion 1.0 firmware 2.0.1 allows a remote attacker to execute arbitrary code via the router's Telnet port 2345 without requiring authentication credentials...

CVE-2024-37855

An issue in Nepstech Wifi Router xpon terminal NTPL-Xpon1GFEVN, hardware verstion 1.0 firmware 2.0.1 allows a remote attacker to execute arbitrary code via the router's Telnet port 2345 without requiring authentication credentials...

PT-2024-27785 · Nepstech · Nepstech Wifi Router Xpon

Name of the Vulnerable Software and Affected Versions: Nepstech Wifi Router xpon terminal NTPL-Xpon1GFEVN, hardware version 1.0, firmware version 2.0.1 Description: The issue allows a remote attacker to execute arbitrary code via the router's Telnet port 2345 without requiring authentication...

CVE-2024-37855

An issue in Nepstech Wifi Router xpon terminal NTPL-Xpon1GFEVN, hardware verstion 1.0 firmware 2.0.1 allows a remote attacker to execute arbitrary code via the router's Telnet port 2345 without requiring authentication credentials...

Nepstech Router Security Vulnerability

Nepstech Router is a series of routers from Nepstech. A security vulnerability exists in Nepstech Router xpon terminal NTPL-Xpon1GFEVN. An attacker could exploit the vulnerability to execute arbitrary code via the router's Telnet port 2345 without authentication credentials...

CVE-2024-37855

The Nepstech Wifi Router xpon (terminal) NTPL-Xpon1GFEVN (hardware version 1.0, firmware 2.0.1) is vulnerable to a remote code execution (RCE) flaw. An unauthenticated remote attacker can exploit the router's Telnet port 2345 to execute arbitrary code. As a mitigation, it is recommended to disabl...

CVE-2024-37855: Improper Control of Generation of Code

An issue in Nepstech Wifi Router xpon terminal NTPL-Xpon1GFEVN, hardware verstion 1.0 firmware 2.0.1 allows a remote attacker to execute arbitrary code via the router's Telnet port 2345 without requiring authentication credentials...