This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2017-3216 | BDVDB-2026-86790 Detail

Huawei TechnologiesBM2022

Description#

WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote, unauthenticated attacker to gain administrator access to the device by performing an administrator password change on the device via a crafted POST request.

Impact#

No impact statement in the source data.

Weaknesses#

  • CWE-306 Missing Authentication for Critical Function

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.