CVE-2017-11645

The CVE-2017-11645 case affects NetComm Wireless 4GT101W routers (hardware 0.01 / software V1.1.8.8 / bootloader 1.1.3). The root cause is lack of authentication for logfile.html, status.html, and system_config.html, enabling an unauthenticated attacker to access sensitive information exposed by ...

CVE-2017-11647

NetComm Wireless 4GT101W routers (Hardware 0.01 / Software 1.1.8.8 / Bootloader 1.1.3) are affected by CVE-2017-11647 due to a stored cross-site scripting vulnerability triggered by creating an SSID with an XSS payload. Exploitation involves injecting script via the SSID field, allowing script ex...

CVE-2017-11646

NetComm Wireless 4GT101W routers (Hardware 0.01, Software V1.1.8.8, Bootloader 1.1.3) are vulnerable to Cross-Site Request Forgery (CSRF) as detailed in CVE-2017-11646. The affected component is the device web interface; the root cause is the absence of CSRF protections/tokens in administration.h...