CVE-2017-6530

EUVD-2017-15586
Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw_v1.02.0014 4.20 do not check password.shtml authorization, leading to Arbitrary password change.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 67%
Affected Products (NVD)
VendorProductVersion
televescoaxdata_gateway_1gbps_firmware
1.02.0014_4.20:_4.20
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_en.txt
https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_es.txt
https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_en.txt
https://www.tarlogic.com/advisories/Televes_CoaxData_Gateway_es.txt