CVE-2017-14000

Critical

Published: 05/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An Improper Authentication issue was discovered in Ctek SkyRouter Series 4200 and 4400, all versions prior to V6.00.11. A malicious user can access the application without authenticating by accessing a specific URL on the web server.

Risk Assessment

The organization is at risk of unauthorized access to the application, which could lead to data leakage or other malicious activities.

Recommendation

It is recommended to upgrade to version V6.00.11 or later to mitigate this vulnerability.

Original NVD description (English source)

An Improper Authentication issue was discovered in Ctek SkyRouter Series 4200 and 4400, all versions prior to V6.00.11. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access the application without authenticating.