CVE-2017-7450

AIRTAME HDMI dongle with firmware before 2.2.0 allows unauthenticated access to a big part of the management interface

published April 5, 2017

CVSS
—
EPSS
1%
Percentile
72.5
In the wild
Unconfirmed
What it is

⚠️ Unauthenticated access to your AIRTAME HDMI dongle? It's like leaving the door wide open at the office while the coffee machine brews! ☕️ Think of it as a hotel with an unlocked management office — anyone can stroll in, grab the guest Wi-Fi password, and hold the staff at the front desk hostage while they decide on dinner. This flaw gives attackers a direct route to sensitive information and more! An attacker could potentially gain access to critical management settings, extract your Wi-Fi password, and force updates or reboots at any time. This could lead to unauthorized network access, service disruptions, or even the spreading of malicious updates — all of which could be absolutely devastating for your operations.

Put simply

Think of it as a hotel with an unlocked management office — anyone can stroll in, grab the guest Wi-Fi password, and hold the staff at the front desk hostage while they decide on dinner. This flaw gives attackers a direct route to sensitive information and more! This vulnerability allows unauthenticated users to access a significant part of the AIRTAME management interface due to improper access controls. Firmware versions prior to 2.2.0 are affected, leaving the door wide open for attackers to manipulate the device settings.

What to do

An attacker could potentially gain access to critical management settings, extract your Wi-Fi password, and force updates or reboots at any time. This could lead to unauthorized network access, service disruptions, or even the spreading of malicious updates — all of which could be absolutely devastating for your operations. Update the AIRTAME firmware to version 2.2.0 or later immediately to close this security gap. For extra security, review your network settings and ensure that your devices are properly secured against unauthorized access. You've got this! With a quick firmware update, you'll lock down your AIRTAME and keep your data safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01412 · 72.5th percentile
Published
2017-04-05T23:00Z
EPSS history
Timeline
  • 05 APR 23:00Z
    AIRTAME HDMI dongle with firmware before 2.2.0 allows unauthenticated access to a big part of the management interface
    cvelistv5