VULNERABILITY INTELLIGENCE

CVE-2017-11646

CVSS score8.8 HIGH
EPSS probability0.45%
CISA KEVNot currently listed
Published2017-07-28
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to CSRF attacks, as demonstrated by using administration.html to disable the firewall. They does not contain any token that can mitigate CSRF vulnerabilities within the device.

Weakness classification

  • CWE-352: Cross-Site Request Forgery (CSRF)

Primary references