NetSight
critical9.4

CVE-2017-14000

An Improper Authentication issue was discovered in Ctek SkyRouter Series 4200 and 4400, all versions prior to V6.00.11.

Impact

An Improper Authentication issue was discovered in Ctek SkyRouter Series 4200 and 4400, all versions prior to V6.00.11. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access the application without authenticating.

Affected products

VendorProductAffected versions
CtekproductsSkyrouter Z4200 Firmware
through 6.00.05
CtekproductsSkyrouter Z4400 Firmware
through 6.00.05

Weakness classification

References