Vulnerabilities > CVE-2019-6279 - Unspecified vulnerability in Chinamobileltd Gpn2.4P21-C-Cn Firmware W2001En00
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
ChinaMobile PLC Wireless Router GPN2.4P21-C-CN devices with firmware W2001EN-00 have an Incorrect Access Control vulnerability via the cgi-bin/webproc?getpage=html/index.html subpage=wlsecurity URI, allowing an Attacker to change the Wireless Security Password.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 1 | |
| Hardware | 1 |
Exploit-Db
| file | exploits/hardware/webapps/46580.txt |
| id | EDB-ID:46580 |
| last seen | 2019-03-20 |
| modified | 2019-03-20 |
| platform | hardware |
| port | 80 |
| published | 2019-03-20 |
| reporter | Exploit-DB |
| source | https://www.exploit-db.com/download/46580 |
| title | PLC Wireless Router GPN2.4P21-C-CN - Incorrect Access Control |
| type | webapps |
Packetstorm
data source https://packetstormsecurity.com/files/download/151274/plcwrgpn-access.txt id PACKETSTORM:151274 last seen 2019-01-29 published 2019-01-22 reporter Kumar Saurav source https://packetstormsecurity.com/files/151274/PLC-Wireless-Router-GPN2.4P21-C-CN-Incorrect-Access-Control.html title PLC Wireless Router GPN2.4P21-C-CN Incorrect Access Control data source https://packetstormsecurity.com/files/download/152166/plcwrgpn2-access.txt id PACKETSTORM:152166 last seen 2019-03-21 published 2019-03-20 reporter Kumar Saurav source https://packetstormsecurity.com/files/152166/PLC-Wireless-Router-GPN2.4P21-C-CN-Incorrect-Access-Control.html title PLC Wireless Router GPN2.4P21-C-CN Incorrect Access Control
References
- http://packetstormsecurity.com/files/151274/PLC-Wireless-Router-GPN2.4P21-C-CN-Incorrect-Access-Control.html
- http://packetstormsecurity.com/files/152166/PLC-Wireless-Router-GPN2.4P21-C-CN-Incorrect-Access-Control.html
- https://0dayfindings.home.blog/2019/01/15/plc-wireless-router-gpn2-4p21-c-cn-incorrect-access-control/
- https://www.exploit-db.com/exploits/46580/
- https://www.youtube.com/watch?v=-cw04rOYREQ
- http://packetstormsecurity.com/files/151274/PLC-Wireless-Router-GPN2.4P21-C-CN-Incorrect-Access-Control.html
- https://www.youtube.com/watch?v=-cw04rOYREQ
- https://www.exploit-db.com/exploits/46580/
- https://0dayfindings.home.blog/2019/01/15/plc-wireless-router-gpn2-4p21-c-cn-incorrect-access-control/
- http://packetstormsecurity.com/files/152166/PLC-Wireless-Router-GPN2.4P21-C-CN-Incorrect-Access-Control.html