CVE-2016-5650

High

Published: 24/08/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

ZModo ZP-NE14-S and ZP-IBH-13W devices do not enforce a WPA2 configuration setting, allowing remote attackers to associate with an arbitrary access point using a recognized SSID value.

Risk Assessment

Attackers can take control of the network connection, potentially leading to data interception or man-in-the-middle attacks.

Recommendation

It is recommended to update the device firmware and implement additional network security measures to mitigate the risk of unauthorized access.

Other vulnerabilities in ZModo ZP-NE14-S, ZP-IBH-13W

CVE-2016-5081Critical
ZModo ZP-NE14-S and ZP-IBH-13W devices have a hardcoded root password, which makes it easier for remote attackers to obtain access via a TELNET session.

Original NVD description (English source)

ZModo ZP-NE14-S and ZP-IBH-13W devices do not enforce a WPA2 configuration setting, which allows remote attackers to trigger association with an arbitrary access point by using a recognized SSID value.