CVE-2022-34767 — ALLNET Gmbh - ADSL/VDSL Router inkl. Modem and Wlan Authorization Bypass

CVE-2022-34767

ALLNET Gmbh - ADSL/VDSL Router inkl. Modem and Wlan Authorization Bypass PUBLISHED

Description (CNA)

Web page which "wizardpwd.asp" ALLNET Router model WR0500AC is prone to Authorization bypass vulnerability – the password, located at "admin" allows changing the http[s]://wizardpwd.asp/cgi-bin. Does not validate the user's identity and can be accessed publicly.

Affected (CNA)

Vendor / product	Versions
ALLNET Gmbh / ALLNET Gmbh - ADSL/VDSL Router inkl. Modem and Wlan	affected Update to the latest version before Update to the latest version*

CWE

No CWE identifiers supplied.

References

https://www.gov.il/en/Departments/faq/cve_advisories

ADP enrichment

CVE

No English description supplied.

https://www.gov.il/en/Departments/faq/cve_advisories