Zyxel LTE4506-M606
Approved changes feed: RSS · Atom
cpe:2.3:h:zyxel:lte4506-m606:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Zyxel (d3fcf896-5708-55f8-8f74-3e19a9d55b89) |
|---|---|
| Product | Lte4506 M606 (bcf7b238-4b83-5956-833e-662fe3d426c1) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-28899 |
not_vulnerable | 2026-06-08 05:23:56.560508 |
Details available
The Web CGI Script on ZyXEL LTE4506-M606 V1.00(ABDO.2)C0 devices does not require authentication, which allows remote unauthenticated attackers (via crafted JSON action data to /cgi-bin/gui.cgi) to use all features provided by the router. Examples: change the router password, retrieve the Wi-Fi passphrase, send an SMS message, or modify the IP forwarding to access the internal network.
Published: 2021-03-16T16:17:06.000Z
Updated: 2024-08-04T16:41:00.245Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.