CVE-2024-37855

Published June 25th, 2024

View on NVD ↗

CVSS v3

8.4

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

An issue in Nepstech Wifi Router xpon (terminal) NTPL-Xpon1GFEVN, hardware verstion 1.0 firmware 2.0.1 allows a remote attacker to execute arbitrary code via the router's Telnet port 2345 without requiring authentication credentials.

baroi-ai/nepstech-xpon-router-rce

Nepstech Wifi Router xpon (terminal) NTPL-Xpon1GFEVN v.1.0 firmware v.2.0.1 allows a remote attacker to execute arbitrary code via the router's Telnet port 2345 without requiring authentication

GitHub