RSS   Vulnerabilities for '4gee wifi mbb firmware'   RSS

2017-09-11
 
CVE-2017-14269

 

 
EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices allow remote attackers to obtain sensitive information via a JSONP endpoint, as demonstrated by passwords and SMS content.

 
 
CVE-2017-14268

 

 
EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices have XSS in the sms_content parameter in a getSMSlist request.

 
 
CVE-2017-14267

 

 
EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices have CSRF, related to goform/AddNewProfile, goform/setWanDisconnect, goform/setSMSAutoRedirectSetting, goform/setReset, and goform/uploadBackupSettings.

 

 >>> Vendor: EE 2 Products
4gee wifi mbb firmware
4gee firmware


Copyright 2024, cxsecurity.com

 

Back to Top