← Back

Wah7706 Firmware

wah7706_firmware

Vendor: Zyxel • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-28899
1Zyxel
3Lte4506 M606 Firmware
Lte7460 M608 FirmwareWah7706 Firmware
Nov 21, 2024
Mar 16, 2021
N/A· v4
9.1 CRITICAL· v3
6.4 MEDIUM· v2
The Web CGI Script on ZyXEL LTE4506-M606 V1.00(ABDO.2)C0 devices does not require authentication, which allows remote unauthenticated attackers (via crafted JSON action data to /cgi-bin/gui.cgi) to use all features provi...Show more
The Web CGI Script on ZyXEL LTE4506-M606 V1.00(ABDO.2)C0 devices does not require authentication, which allows remote unauthenticated attackers (via crafted JSON action data to /cgi-bin/gui.cgi) to use all features provided by the router. Examples: change the router password, retrieve the Wi-Fi passphrase, send an SMS message, or modify the IP forwarding to access the internal network.Show less