CVE-2018-18377

Name of the Vulnerable Software and Affected Versions Orange AirBox Y858 FL 01.16 04

Description The issue allows attackers to reset a router to factory settings by exploiting the goform/setReset endpoint, which can then be used to login using the default admin:admin credentials.

Recommendations For Orange AirBox Y858 FL 01.16 04, consider changing the default admin credentials to prevent unauthorized access after a potential reset. As a temporary workaround, restrict access to the goform/setReset endpoint to minimize the risk of exploitation.