CVE-2019-18661

Fastweb FASTGate 1.0.1b is affected by an authentication bypass where a check_pwd return value can be altered from 0 to 1, enabling an attacker to view all pages of the administration console without achieving full administrative control. Root cause involves partial bypass of authentication; no e...

CVE-2018-6023

Affected product: Fastweb FASTgate 0.00.47 router. Vulnerability: Cross-site request forgery (CSRF) that allows attackers to modify configuration, including changing the Wi‑Fi password and activating Guest Wi‑Fi. Root cause: CSRF in the device’s web interface enabling unauthorized authenticated a...

CVE-2018-20122

The web interface on FASTGate Fastweb devices is vulnerable to a command injection flaw in a CGI binary. This vulnerability, identified as CWE-78 , allows an unauthenticated attacker to achieve remote code execution with root privileges . The issue affects devices with firmware through 0.00.47_FW...