EUVD-2017-12337

Malware in sbrugna...

CVE-2017-3216: Missing Authentication for Critical Function

WiMAX routers based on the MediaTek SDK libmtk that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote, unauthenticated attacker to gain administrator access to the device by performing an administrator password change on the device via a crafted POST request...

CVE-2017-3216

CVE-2017-3216 affects WiMAX routers that use MediaTek libmtk httpd plugin and a customized commit2.cgi. A crafted POST request (ADMIN_PASSWD) can bypass authentication and let an unauthenticated attacker change the administrator password, gaining admin access and potentially full control of the d...

Various WiMAX routers contain a authentication bypass vulnerability in custom libmtk httpd plugin

Overview WiMAX routers from several vendors making use of a custom httpd plugin for libmtk are vulnerable to an authentication bypass allowing a remote, unauthenticated attacker to change the administrator password on the device. Description CWE-306: Missing Authentication for Critical Function -...

Huawei Wimax CSRF / Information Disclosure / Manipulation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory Information Title: Huawei Wimax routers vulnerable to multiple threats Advisory URL: https://pierrekim.github.io/advisories/2015-huawei-0x01.txt Blog URL:...