CVE-2017-16902

Name of the Vulnerable Software and Affected Versions Vonage VDV-23 115 version 3.2.11-0.9.40

Description The issue occurs when a long string of characters is sent in the loginPassword and/or loginUsername field to the "goform/login" endpoint, causing the router to reboot.

Recommendations For version 3.2.11-0.9.40, as a temporary workaround, consider restricting access to the "goform/login" endpoint until a patch is available. Avoid using long strings in the loginUsername and loginPassword fields to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.