EUVD-2018-5057

Malware in sbrugna...

EUVD-2017-15160

Malware in sbrugna...

CVE-2018-13108

All ADB broadband gateways / routers based on the Epicentro platform are affected by a local root jailbreak vulnerability where attackers are able to gain root access on the device, and extract further information such as sensitive configuration data of the ISP e.g., VoIP credentials or attack th...

CVE-2018-13108

CVE-2018-13108 affects all ADB broadband gateways/routers on the Epicentro platform. The root cause is a local root jailbreak via a network file sharing flaw (Samba) that lets an attacker gain root access and potentially exfiltrate sensitive ISP configuration data (e.g., VoIP credentials) or comp...

CVE-2017-6094

CPEs used by subscribers on the access network receive their individual configuration settings from a central GAPS instance. A CPE identifies itself by the MAC address of its WAN interface and a certain "chk" value 48bit derived from the MAC. The algorithm used to compute the "chk" was disclosed ...

PT-2017-16890

Name of the Vulnerable Software and Affected Versions Genexis B.V. GAPS versions up to 7.2 Description The issue allows for the forgery of valid chk values for any given MAC address, enabling the reception of configuration settings of other subscribers' CPEs. These settings often contain sensitiv...

CVE-2017-6094: Exposure of Sensitive Information to an Unauthorized Actor

CPEs used by subscribers on the access network receive their individual configuration settings from a central GAPS instance. A CPE identifies itself by the MAC address of its WAN interface and a certain "chk" value 48bit derived from the MAC. The algorithm used to compute the "chk" was disclosed ...