PT-2021-20872
CVE-2021-35296
·
Published
2021-10-04
·
Updated
2022-01-05
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
PTCL HG150-Ub version 3.0
Description:
An issue in the administrator authentication panel allows attackers to bypass authentication via modification of the
cookie value and Response Path.Recommendations:
For PTCL HG150-Ub version 3.0, consider restricting access to the administrator authentication panel until a patch is available. As a temporary workaround, avoid using the authentication panel with modified
cookie values and Response Path to minimize the risk of exploitation. Found an issue in the description? Have something to add? Feel free to write us 👾