CVE Catalog

CVE-2017-6531

Critical
Published: Translated: NVD NIST

Summary

On Televes COAXDATA GATEWAY 1Gbps devices in version doc-wifi-hgw_v1.02.0014 4.20, the backup/restore feature lacks proper access control, related to ReadFile.cgi and LoadCfgFile.

Risk Assessment

The lack of access control for the backup/restore feature may allow unauthorized users to access sensitive data and device configurations, posing a serious security risk.

Recommendation

It is recommended to implement appropriate access control mechanisms for the backup and restore functions to secure sensitive data.

Original NVD description (English source)

On Televes COAXDATA GATEWAY 1Gbps devices doc-wifi-hgw_v1.02.0014 4.20, the backup/restore feature lacks access control, related to ReadFile.cgi and LoadCfgFile.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS