critical9.8
CVE-2017-3216
WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote, unauthenticated a…
Impact
WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote, unauthenticated attacker to gain administrator access to the device by performing an administrator password change on the device via a crafted POST request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Greenpacket | Ox350 Firmware | All versions |
| Huawei | Bm2022 Firmware | All versions |
| Huawei | Hes-309m Firmware | All versions |
| Huawei | Hes-319m Firmware | All versions |
| Huawei | Hes-319m2w Firmware | All versions |
| Huawei | Hes-339m Firmware | All versions |
| Mada | Soho Wireless Router Firmware | All versions |
| Zte | Ox-330p Firmware | All versions |
| Zyxel | Max218m Firmware | All versions |
| Zyxel | Max218m1w Firmware | All versions |
| Zyxel | Max218mw Firmware | All versions |
| Zyxel | Max308m Fimware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://blog.sec-consult.com/2017/06/ghosts-from-past-authentication-bypass.html
- http://www.kb.cert.org/vuls/id/350135
- https://sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170607-0_Various_WiMAX_CPEs_Authentication_Bypass_v10.txt
- http://blog.sec-consult.com/2017/06/ghosts-from-past-authentication-bypass.html
- http://www.kb.cert.org/vuls/id/350135
- https://sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170607-0_Various_WiMAX_CPEs_Authentication_Bypass_v10.txt