PT-2022-19802
CVE-2022-29729
·
تاريخ النشر
2022-05-27
·
تاريخ التحديث
2022-06-10
الوصف من
CVSS 3.1
7.5
عاليةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Verizon 4G LTE Network Extender GA4.38 - V0.4.038.2131
Description
The issue is related to a weak default admin password generation algorithm. This algorithm generates passwords that are accessible to unauthenticated attackers via the webUI login page.
Recommendations
For Verizon 4G LTE Network Extender GA4.38 - V0.4.038.2131, consider changing the default admin password to a strong and unique password to prevent unauthorized access. As a temporary workaround, restrict access to the webUI login page until a more secure password generation algorithm is implemented.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾