CVE-2017-14243 An authentication bypass vulnerability on UTStar WA3002G4 ADSL Broadband Modem WA3002G4-0021.01 devices allows attackers to directly access administrative settings and obtain cleartext credentials fro...
CriticalCVSS 9.8
EPSS 14.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
An authentication bypass vulnerability on UTStar WA3002G4 ADSL Broadband Modem WA3002G4-0021.01 devices allows attackers to directly access administrative settings and obtain cleartext credentials from HTML source, as demonstrated by info.cgi, upload.cgi, backupsettings.cgi, pppoe.cgi, resetrouter.cgi, and password.cgi.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| utstar wa3002g4 firmware | = wa3002g4-0021.01 | No fix listed |
References
- 42739 exploit third-party-advisory vdb-entry
- www.techipick.com third-party-advisory