Description
WNC T-Mobile 5G Box IDU router is vulnerable to improper access control. The vulnerability exists in the wnc_maccheck.cgi endpoint, which is accessible without authentication. It allows a remote attacker to retrieve sensitive configuration data, including the administrator web password, WiFi passphrase, and technical device information.This issue has been fixed in firmware version 1.1.0.651412
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WNC | T-Mobile 5G Box IDU | < 1.1.0.651412 | 1.1.0.651412 |