Approved changes feed: RSS · Atom

cpe:2.3:o:zyxel:lte7460-m608_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorZyxel (d3fcf896-5708-55f8-8f74-3e19a9d55b89)
ProductLte7460 M608 Firmware (57a97090-5f17-5a0a-ba79-62cb5ab32d0b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-28899 vulnerable 2026-06-08 05:23:56.561206 Details available
The Web CGI Script on ZyXEL LTE4506-M606 V1.00(ABDO.2)C0 devices does not require authentication, which allows remote unauthenticated attackers (via crafted JSON action data to /cgi-bin/gui.cgi) to use all features provided by the router. Examples: change the router password, retrieve the Wi-Fi passphrase, send an SMS message, or modify the IP forwarding to access the internal network.
Published: 2021-03-16T16:17:06.000Z
Updated: 2024-08-04T16:41:00.245Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.