CVE-2017-14269

Critical

Published: 11/09/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

EE 4GEE WiFi MBB devices (before version EE60_00_05.00_31) allow remote attackers to obtain sensitive information via a JSONP endpoint, potentially exposing passwords and SMS content.

Risk Assessment

Organizations using these devices may be at risk of leaking confidential data, which could lead to serious information security consequences.

Recommendation

It is recommended to update the devices to the latest firmware version to mitigate the risks associated with this vulnerability.

Original NVD description (English source)

EE 4GEE WiFi MBB (before EE60_00_05.00_31) devices allow remote attackers to obtain sensitive information via a JSONP endpoint, as demonstrated by passwords and SMS content.