CVE-2021-35296

An issue in the administrator authentication panel of PTCL HG150-Ub v3.0 allows attackers to bypass authentication via modification of the cookie value and…

published October 4, 2021

CVSS
—
EPSS
2%
Percentile
80.5
In the wild
Unconfirmed
What it is

🚨 A crafty little cookie manipulation is all it takes to bypass admin authentication in PTCL HG150-Ub v3.0! Think of it like a restaurant where someone swapped their order with the kitchen's secret menu, gaining access to dishes no one else could see. Once inside, they could whip up anything they wanted – a dangerous scenario indeed! An attacker could leverage this oversight to access the admin panel, potentially allowing them to change configurations or compromise sensitive information. This could lead to unauthorized control over the network, putting every connected device at risk – absolutely devastating!

Put simply

Think of it like a restaurant where someone swapped their order with the kitchen's secret menu, gaining access to dishes no one else could see. Once inside, they could whip up anything they wanted – a dangerous scenario indeed! This vulnerability allows attackers to bypass authentication by modifying the cookie value and the Response Path in the admin authentication panel of the PTCL HG150-Ub v3.0 router.

What to do

An attacker could leverage this oversight to access the admin panel, potentially allowing them to change configurations or compromise sensitive information. This could lead to unauthorized control over the network, putting every connected device at risk – absolutely devastating! Check and update the firmware of your PTCL HG150-Ub router as soon as possible. Consider implementing strict cookie validation to prevent unauthorized access. Regularly monitor your device for suspicious activity! You've got this! Stay proactive, secure your devices, and keep your network safe! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01992 · 80.5th percentile
Published
2021-10-04T16:39Z
EPSS history
Timeline
  • 04 OCT 16:39Z
    An issue in the administrator authentication panel of PTCL HG150-Ub v3.0 allows attackers to bypass authentication via modification of the cookie value and…
    cvelistv5