PT-2022-19802

CVE-2022-29729

·

Published

2022-05-27

·

Updated

2022-06-10

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Verizon 4G LTE Network Extender GA4.38 - V0.4.038.2131
Description The issue is related to a weak default admin password generation algorithm. This algorithm generates passwords that are accessible to unauthenticated attackers via the webUI login page.
Recommendations For Verizon 4G LTE Network Extender GA4.38 - V0.4.038.2131, consider changing the default admin password to a strong and unique password to prevent unauthorized access. As a temporary workaround, restrict access to the webUI login page until a more secure password generation algorithm is implemented.
Exploitability
Exploit
Fix
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾