CVE-2017-2126

WAPM-1166D firmware Ver.1.2.7 and earlier, WAPM-APG600H firmware Ver.1.16.1 and earlier allows remote attackers to bypass authentication and access the…

published July 22, 2017

CVSS
—
EPSS
4%
Percentile
90.5
In the wild
Unconfirmed
What it is

⚠️ An attacker could waltz right into the configuration interface of WAPM-1166D and WAPM-APG600H devices with a simple exploit, bypassing authentication entirely! 🔑 Think of it like a hotel with a front desk that doesn’t check IDs before handing out room keys — anyone can walk in and access sensitive areas without any verification. 🎟️ This vulnerability allows unauthorized access, meaning an attacker could change settings or compromise the device’s functionality. The consequences could lead to data breaches or a complete takeover of the device, putting your network at risk!

Put simply

Think of it like a hotel with a front desk that doesn’t check IDs before handing out room keys — anyone can walk in and access sensitive areas without any verification. 🎟️ The flaw exists in WAPM-1166D firmware version 1.2.7 and earlier, and WAPM-APG600H firmware version 1.16.1 and earlier, allowing remote attackers to bypass authentication through unspecified vectors, opening the door to the configuration interface.

What to do

This vulnerability allows unauthorized access, meaning an attacker could change settings or compromise the device’s functionality. The consequences could lead to data breaches or a complete takeover of the device, putting your network at risk! To secure your devices, immediately update the WAPM-1166D to the latest firmware version and the WAPM-APG600H to at least version 1.16.2 or later. Regularly check for firmware updates and ensure your network settings enforce strong authentication practices! You've got this! With these updates, you’ll be one step closer to hero status in securing your network! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04020 · 90.5th percentile
Published
2017-07-22T00:00Z
EPSS history
Timeline
  • 22 JUL 00:00Z
    WAPM-1166D firmware Ver.1.2.7 and earlier, WAPM-APG600H firmware Ver.1.16.1 and earlier allows remote attackers to bypass authentication and access the…
    cvelistv5