Approved changes feed: RSS · Atom

cpe:2.3:o:twsz:wifi_repeater_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorTwsz (8b9f86ca-176f-57aa-bccf-d25c3288252b)
ProductWifi Repeater Firmware (8791bae5-ba6c-5067-8176-0fa4dfaf7a33)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-8772 vulnerable 2026-06-08 05:10:08.871254 Details available
On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username:"root" password:"root") and can: 1. Read the entire file system; 2. Write to the file system; or 3. Execute any code that attacker desires (malicious or not).
Published: 2017-09-20T14:00:00.000Z
Updated: 2024-08-05T16:48:21.798Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8771 vulnerable 2026-06-08 05:10:08.870794 Details available
On BE126 WIFI repeater 1.0 devices, an attacker can log into telnet (which is open by default) with default credentials as root (username:"root" password:"root"). The attacker can make a user that is connected to the repeater click on a malicious link that will log into the telnet and will infect the device with malicious code.
Published: 2017-09-20T14:00:00.000Z
Updated: 2024-08-05T16:48:22.691Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8770 vulnerable 2026-06-08 05:10:08.869689 Details available
There is LFD (local file disclosure) on BE126 WIFI repeater 1.0 devices that allows attackers to read the entire filesystem on the device via a crafted getpage parameter.
Published: 2017-09-20T14:00:00.000Z
Updated: 2024-08-05T16:48:22.683Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-13713 vulnerable 2026-06-08 05:08:48.779352 Details available
T&W WIFI Repeater BE126 allows remote authenticated users to execute arbitrary code via shell metacharacters in the user parameter to cgi-bin/webupg.
Published: 2017-09-07T13:00:00.000Z
Updated: 2024-08-05T19:05:20.021Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.