CVE-2017-6531

On Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw_v1.02.0014 4.20, the backup/restore feature lacks access control, related to ReadFile.cgi and…

published July 20, 2017

CVSS
—
EPSS
2%
Percentile
74.5
In the wild
Unconfirmed
What it is

⚠️ A backup/restore feature without access control is just asking for trouble! 😱 Imagine anyone being able to grab your private settings with a flick of a digital switch! Think of it like a hotel manager who leaves the safe open, allowing anyone to see what's inside — all your valuables are wide open for the taking! In this case, anyone who knows where to look could access sensitive configurations on your Televes COAXDATA GATEWAY. This could lead to unauthorized changes that impact network performance or expose your network to further attacks.

Put simply

Think of it like a hotel manager who leaves the safe open, allowing anyone to see what's inside — all your valuables are wide open for the taking! The vulnerability arises because the backup and restore functions in versions doc-wifi-hgw_v1.02.0014 4.20 of the device fail to enforce proper access controls, allowing any user to read or load configuration files without authentication.

What to do

In this case, anyone who knows where to look could access sensitive configurations on your Televes COAXDATA GATEWAY. This could lead to unauthorized changes that impact network performance or expose your network to further attacks. To protect your network, immediately audit access to your device and ensure that only trusted personnel have the ability to use backup and restore functions. If possible, update to the latest firmware version where these issues may have been addressed. You've got this! With a little diligence, you can lock down your configurations and keep everything secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01536 · 74.5th percentile
Published
2017-07-20T13:00Z
EPSS history
Timeline
  • 20 JUL 13:00Z
    On Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw_v1.02.0014 4.20, the backup/restore feature lacks access control, related to ReadFile.cgi and…
    cvelistv5