critical9.8
CVE-2021-39290
Certain NetModule devices allow Limited Session Fixation via PHPSESSID.
Impact
Certain NetModule devices allow Limited Session Fixation via PHPSESSID. These models with firmware before 4.3.0.113, 4.4.0.111, and 4.5.0.105 are affected: NB800, NB1600, NB1601, NB1800, NB1810, NB2700, NB2710, NB2800, NB2810, NB3700, NB3701, NB3710, NB3711, NB3720, and NB3800.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Netmodule | Netmodule Router Software | before 4.3.0.113 from 4.4.0.0 before 4.4.0.111 from 4.5.0.0 before 4.5.0.105 |