CVE-2020-11967 | BDVDB-2026-134839 Detail

Description#

In IQrouter through 3.3.1, remote attackers can control the device (restart network, reboot, upgrade, reset) because of Incorrect Access Control. Note: The vendor claims that this vulnerability can only occur on a brand-new network that, after initiating the forced initial configuration (which has a required step for setting a secure password on the system), makes this CVE invalid. This vulnerability is “true for any unconfigured release of OpenWRT, and true of many other new Linux distros prior to being configured for the first time”

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://evenroute.com/
https://pastebin.com/grSCSBSu
https://openwrt.org/docs/guide-quick-start/walkthrough_login
https://evenroute.zendesk.com/hc/en-us/articles/216107838-How-do-I-configure-an-IQrouter-

Exploit#

No public exploit known

History#

Version 12020-04-21Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.