CVE-2018-9232 Due to the lack of firmware authentication in the upgrade process of T&W WIFI Repeater BE126 devices, an attacker can craft a malicious firmware and use it as an update.
HighCVSS 7.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Due to the lack of firmware authentication in the upgrade process of T&W WIFI Repeater BE126 devices, an attacker can craft a malicious firmware and use it as an update.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| twsz be126 firmware | All versions | No fix listed |
References
- www.digitalwhisper.co.il exploit third-party-advisory