Netcomm 4Gt101W Bootloader vulnerabilities

3 vulnerabilities

Known vulnerabilities in Netcomm 4Gt101W Bootloader, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2017-11645netcomm4gt101w_bootloader+1
EPSS score
1.28%
NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 do not require authentication for logfile.html, status.html, or system_config.html.5.4CVE-2017-11647netcomm4gt101w_bootloader+1
EPSS score
0.51%
NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to stored cross-site scripting attacks. Creating an SSID with an XSS payload results in successful exploitation.8.8CVE-2017-11646netcomm4gt101w_bootloader+1
EPSS score
0.45%
NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to CSRF attacks, as demonstrated by using administration.html to disable the firewall. They does not contain any token that can mitigate CSRF vulnerabilities within the device.