Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2022-34767

ALLNET Gmbh - ADSL/VDSL Router inkl. Modem and Wlan Authorization Bypass

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
INCD

Description

Web page which "wizardpwd.asp" ALLNET Router model WR0500AC is prone to Authorization bypass vulnerability – the password, located at "admin" allows changing the http[s]://wizardpwd.asp/cgi-bin. Does not validate the user's identity and can be accessed publicly.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ALLNET Gmbh ALLNET Gmbh - ADSL/VDSL Router inkl. Modem and Wlan

  • Update to the latest version to < Update to the latest version*affected

References