Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Web CGI Script on ZyXEL LTE4506-M606 V1.00(ABDO.2)C0 devices does not require authentication, which allows remote unauthenticated attackers (via crafted JSON action data to /cgi-bin/gui.cgi) to use all features provided by the router. Examples: change the router password, retrieve the Wi-Fi passphrase, send an SMS message, or modify the IP forwarding to access the internal network.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ZyXEL LTE4506-M606 访问控制错误漏洞
Vulnerability Description
ZyXEL LTE4506-M606是中国 （ZyXEL）公司的一个路由器。提供网络连接功能。 ZyXEL LTE4506-M606 V1.00(ABDO.2)C0 存在安全漏洞，该漏洞源于Web CGI脚本不需要身份验证，攻击者可利用该漏洞使用路由器提供的所有特性。
CVSS Information
N/A
Vulnerability Type
N/A