CVE-2017-16522

High

Published: 03/11/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES_113WJY0b16 devices allow remote authenticated users to obtain root access by specifying /bin/sh as the command to execute.

Risk Assessment

Remote access to the root account poses a serious security risk, allowing attackers full control over the device and potentially the entire network.

Recommendation

It is recommended to update the device firmware to the latest version to mitigate this vulnerability and restrict device access to trusted users.

Other vulnerabilities in MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1, DSL-100HN-T1 ES_113WJY0b16

CVE-2017-16523Critical
MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES_113WJY0b16 devices have a zyad1234 password for the zyad1234 account, which is equivalent to root and undocumented.

Original NVD description (English source)

MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES_113WJY0b16 devices allow remote authenticated users to obtain root access by specifying /bin/sh as the command to execute.