CVE-2017-3216
CriticalSummary
WiMAX routers based on the MediaTek SDK (libmtk) using a custom httpd plugin are vulnerable to an authentication bypass, allowing a remote, unauthenticated attacker to gain administrator access to the device by performing an administrator password change via a crafted POST request.
Risk Assessment
An attacker can gain full access to the device, posing a serious threat to the security of the network and user data.
Recommendation
It is recommended to update the router firmware and implement additional security measures to minimize the risk of unauthorized access.
Original NVD description (English source)
WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote, unauthenticated attacker to gain administrator access to the device by performing an administrator password change on the device via a crafted POST request.