2 lines
9.9 KiB
JSON
2 lines
9.9 KiB
JSON
{"affected":[{"affectedData":[{"product":"BM2022","vendor":"Huawei Technologies","versions":[{"status":"affected","version":"2.10.14"}]},{"product":"HES-309M","vendor":"Huawei Technologies","versions":[{"status":"affected","version":"unknown"}]},{"product":"HES-319M","vendor":"Huawei Technologies","versions":[{"status":"affected","version":"unknown"}]},{"product":"HES-319M2W","vendor":"Huawei Technologies","versions":[{"status":"affected","version":"unknown"}]},{"product":"HES-339M","vendor":"Huawei Technologies","versions":[{"status":"affected","version":"unknown"}]},{"product":"OX350","vendor":"Green Packet","versions":[{"status":"affected","version":"unknown"}]},{"product":"OX-330P","vendor":"ZTE","versions":[{"status":"affected","version":"unknown"}]},{"product":"MAX218M","vendor":"ZyXEL","versions":[{"status":"affected","version":"2.00(UXG.0)D0"}]},{"product":"MAX218M1W","vendor":"ZyXEL","versions":[{"status":"affected","version":"2.00(UXE.3)D0"}]},{"product":"MAX218MW","vendor":"ZyXEL","versions":[{"status":"affected","version":"2.00(UXD.2)D0"}]},{"product":"MAX308M","vendor":"ZyXEL","versions":[{"status":"affected","version":"2.00(UUA.3)D0"}]},{"product":"MAX318M","vendor":"ZyXEL","versions":[{"status":"affected","version":"unknown"}]},{"product":"MAX338M","vendor":"ZyXEL","versions":[{"status":"affected","version":"unknown"}]},{"product":"Soho Wireless Router","vendor":"MADA","versions":[{"status":"affected","version":"2.10.13"}]}],"source":"cret@cert.org"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:greenpacket:ox350_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"0A81F52A-6DD6-4631-8733-9E47C6DAC87F","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:greenpacket:ox350:-:*:*:*:*:*:*:*","matchCriteriaId":"327A0834-F46C-4E74-925C-D3EA1DE6941E","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:huawei:bm2022_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"A779549C-E231-44F7-94AB-AE12D63641E2","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:huawei:bm2022:-:*:*:*:*:*:*:*","matchCriteriaId":"B4F75E1B-DAA2-495B-B1CA-5228E3819F79","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:huawei:hes-309m_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"F7239E02-7A4A-476B-AAF9-EF72D3A9407F","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:huawei:hes-309m:-:*:*:*:*:*:*:*","matchCriteriaId":"7DA39FE7-9B9E-443A-B41A-CADDCC4F544C","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:huawei:hes-319m_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"36923E11-A6AA-41C5-A3F7-8350A9053D86","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:huawei:hes-319m:-:*:*:*:*:*:*:*","matchCriteriaId":"0863C568-5A6A-4961-B628-299D0E7A54E7","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:huawei:hes-319m2w_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"03234F0A-1CD6-4087-829A-2CB15022A200","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:huawei:hes-319m2w:-:*:*:*:*:*:*:*","matchCriteriaId":"4E48D770-DD54-4980-A8C4-359CF5DEF7A6","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:huawei:hes-339m_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"A3294BDE-B2FB-41DD-A6DE-B08B5278AA1B","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:huawei:hes-339m:-:*:*:*:*:*:*:*","matchCriteriaId":"AAF51DF4-56DB-4EE9-95E4-FCFE040B3770","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:mada:soho_wireless_router_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"16AB1DA5-2DB6-4892-896B-F630B0765989","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:mada:soho_wireless_router:-:*:*:*:*:*:*:*","matchCriteriaId":"33FD7BD1-B005-4F24-962D-5337AFD740AE","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:zte:ox-330p_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"EB20B496-6386-49B4-9103-45729D61F435","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:zte:ox-330p:-:*:*:*:*:*:*:*","matchCriteriaId":"952793D7-1F57-42F3-9379-F9A31289E4AE","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:zyxel:max218m_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"F0F66ADE-21DF-49F0-A404-CE3EED23E178","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:zyxel:max218m:-:*:*:*:*:*:*:*","matchCriteriaId":"CC4B3ACA-0373-4574-AEE1-16E4B8D1E3BA","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:zyxel:max218m1w_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"4DE102CD-FFFA-4E9C-94E6-DDD3E1673A45","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:zyxel:max218m1w:-:*:*:*:*:*:*:*","matchCriteriaId":"1DFAEDFB-E181-4B91-81A6-D105A401870A","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:zyxel:max218mw_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"DE2DF253-7D1D-4C43-A209-681A8663044C","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:zyxel:max218mw:-:*:*:*:*:*:*:*","matchCriteriaId":"1194BED0-101B-4B23-BA0A-BE635F5FA7F8","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:zyxel:max308m_fimware:-:*:*:*:*:*:*:*","matchCriteriaId":"4C0C8A2C-AA09-4326-A369-07895094BB0A","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:zyxel:max308m:-:*:*:*:*:*:*:*","matchCriteriaId":"5DF88B7A-4919-455F-804F-6C1A709B8147","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:zyxel:max318m_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"52093480-956D-47D5-998F-68CE3CE69BDF","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:zyxel:max318m:-:*:*:*:*:*:*:*","matchCriteriaId":"55246D23-CF70-4BE5-899D-72AE038DE262","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:zyxel:max338m_firmware:-:*:*:*:*:*:*:*","matchCriteriaId":"9523A7F1-4F6C-4597-BC02-BA3FE729530D","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:zyxel:max338m:-:*:*:*:*:*:*:*","matchCriteriaId":"34CAEB05-E93D-45BB-9742-00CDBBCFBDE5","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote, unauthenticated attacker to gain administrator access to the device by performing an administrator password change on the device via a crafted POST request."},{"lang":"es","value":"Los routers WiMAX basados en MediaTek SDK (libmtk) que emplean un plugin httpd personalizado son vulnerables a una omisión de autenticación. Esto permite que un atacante remoto no autenticado obtenga acceso de administrador al dispositivo realizando un cambio de contraseña de administrador en el dispositivo mediante una petición POST manipulada."}],"id":"CVE-2017-3216","lastModified":"2026-06-17T01:17:45.190","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":10.0,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":10.0,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2017-06-20T00:29:00.267","references":[{"source":"cret@cert.org","tags":["Third Party Advisory"],"url":"http://blog.sec-consult.com/2017/06/ghosts-from-past-authentication-bypass.html"},{"source":"cret@cert.org","tags":["Mitigation","Third Party Advisory","US Government Resource"],"url":"http://www.kb.cert.org/vuls/id/350135"},{"source":"cret@cert.org","tags":["Exploit","Third Party Advisory"],"url":"https://sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170607-0_Various_WiMAX_CPEs_Authentication_Bypass_v10.txt"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"http://blog.sec-consult.com/2017/06/ghosts-from-past-authentication-bypass.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Third Party Advisory","US Government Resource"],"url":"http://www.kb.cert.org/vuls/id/350135"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"https://sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170607-0_Various_WiMAX_CPEs_Authentication_Bypass_v10.txt"}],"sourceIdentifier":"cret@cert.org","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-306"}],"source":"cret@cert.org","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-306"}],"source":"nvd@nist.gov","type":"Primary"}]}
|