CVE-2019-7745

JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain the Wi-Fi password by making a cgi-bin/qcmap_web_cgi Page=GetWiFi_Setting request…

published May 7, 2019

CVSS
—
EPSS
4%
Percentile
90.0
In the wild
Unconfirmed
What it is

⚠️ A simple request can expose your Wi-Fi password like a poorly guarded secret! An attacker merely needs to make a request to the JioFi device and they’re in. 🔓 Think of it like a café that leaves its recipe book on the counter for anyone to read – anyone who walks in can just take note of the Wi-Fi password without any effort! If an attacker successfully executes this exploit, they can easily obtain your Wi-Fi password, allowing them to siphon off your internet, access your network devices, or potentially engage in more malicious activities. It’s not the end of the world, but it could lead to some unwanted surprises.

Put simply

Think of it like a café that leaves its recipe book on the counter for anyone to read – anyone who walks in can just take note of the Wi-Fi password without any effort! This vulnerability allows remote attackers to obtain the Wi-Fi password from JioFi 4 jmr1140 devices by sending a request to the cgi-bin/qcmap_web_cgi with a specific page parameter, revealing the value of the wpa_security_key field.

What to do

If an attacker successfully executes this exploit, they can easily obtain your Wi-Fi password, allowing them to siphon off your internet, access your network devices, or potentially engage in more malicious activities. It’s not the end of the world, but it could lead to some unwanted surprises. To protect your network, consider disabling remote access features if they're not used, and regularly check for firmware updates from JioFi. Although there's no patch specified, ensuring your device is running the latest firmware can help mitigate risks. You've got this! Take these steps and keep your Wi-Fi safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03807 · 90.0th percentile
Published
2019-05-07T18:59Z
EPSS history
Timeline
  • 07 MAY 18:59Z
    JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain the Wi-Fi password by making a cgi-bin/qcmap_web_cgi Page=GetWiFi_Setting request…
    cvelistv5