CVE-2017-11645

NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 do not require authentication for logfile.html, status.html, or…

published July 28, 2017

CVSS
—
EPSS
1%
Percentile
69.6
In the wild
Unconfirmed
What it is

⚠️ A few clicks could reveal sensitive router configurations without even breaking a sweat! NetComm Wireless 4GT101W routers are letting anyone access critical files like logfile.html and system_config.html without any authentication. 😱 Think of it like a restaurant that forgot to lock its back door — anyone can walk in and read the guest list or see the kitchen's secret sauce recipe. It's a recipe for disaster that shouldn't be served! An attacker could easily gather sensitive information about the router's configuration, potentially leading to unauthorized access or attacks on the network. While it hasn’t been widely exploited, the potential for mischief is absolutely devastating!

Put simply

Think of it like a restaurant that forgot to lock its back door — anyone can walk in and read the guest list or see the kitchen's secret sauce recipe. It's a recipe for disaster that shouldn't be served! This vulnerability arises because the affected router’s web interface allows unauthenticated access to critical HTML files, exposing sensitive data without any login requirements.

What to do

An attacker could easily gather sensitive information about the router's configuration, potentially leading to unauthorized access or attacks on the network. While it hasn’t been widely exploited, the potential for mischief is absolutely devastating! Check your NetComm Wireless 4GT101W routers and ensure you're running the latest firmware version. If you find versions vulnerable to this issue, consider restricting access to the router's web interface and review your security policies. It's time to tighten those security measures! You've got this! By following these steps, you can keep your network safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01280 · 69.6th percentile
Published
2017-07-28T05:00Z
EPSS history
Timeline
  • 28 JUL 05:00Z
    NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 do not require authentication for logfile.html, status.html, or…
    cvelistv5