CVE-2021-35296
Quick assessment
Affected
n/a n/a
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Ptcl Hg150-Ub是巴基斯坦巴基斯坦电信（Ptcl）公司的一款调制解调器。 PTCL HG150-Ub v3.0 存在安全漏洞，攻击者可利用该漏洞通过修改cookie值和响应路径来绕过认证。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2021-35296
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An issue in the administrator authentication panel of PTCL HG150-Ub v3.0 allows attackers to bypass authentication via modification of the cookie value and Response Path.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Ptcl Hg150-Ub 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Ptcl Hg150-Ub是巴基斯坦巴基斯坦电信（Ptcl）公司的一款调制解调器。 PTCL HG150-Ub v3.0 存在安全漏洞，攻击者可利用该漏洞通过修改cookie值和响应路径来绕过认证。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2021-35296
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | PoC of CVE-2021-35296 - PTCL Modem HG150-Ub | https://github.com/afaq1337/CVE-2021-35296 | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-35296
请登录查看更多情报信息。
Other References for CVE-2021-35296 (1)
-
https://github.com/afaq1337/CVE-2021-35296 x_refsource_MISC
Same Patch Batch · n/a · 2021-10-04 · 42 CVEs total
| CVE-2021-38618 | 7.4 HIGH | Mitre Corporation Gfos Workforce Management 授权问题漏洞 |
| CVE-2021-37330 | Booking Core 跨站脚本漏洞 | |
| CVE-2021-40683 | Akamai Enterprise Application Access Client 代码问题漏洞 | |
| CVE-2021-41867 | OnionShare 安全漏洞 | |
| CVE-2021-38823 | IceHrm 代码问题漏洞 | |
| CVE-2021-38822 | IceHrm 跨站脚本漏洞 | |
| CVE-2021-41868 | OnionShare 安全漏洞 | |
| CVE-2021-39486 | Gila CMS 跨站脚本漏洞 | |
| CVE-2021-37777 | Gila CMS 信息泄露漏洞 | |
| CVE-2021-37333 | Laravel Booking System Booking Core 代码问题漏洞 | |
| CVE-2021-37331 | Booking Core 授权问题漏洞 | |
| CVE-2021-41591 | Acinq Eclair 安全漏洞 | |
| CVE-2021-41511 | Lodging Reservation Management System SQL注入漏洞 | |
| CVE-2021-41878 | i-Panel Administration System 跨站脚本漏洞 | |
| CVE-2021-41869 | SuiteCRM 安全漏洞 | |
| CVE-2021-41322 | Polycom Vvx 400/410 安全漏洞 | |
| CVE-2021-41285 | Crucial Ballistix Mod Utility 安全漏洞 | |
| CVE-2021-40325 | Cobbler 安全漏洞 | |
| CVE-2021-40324 | Cobbler 代码问题漏洞 | |
| CVE-2021-40323 | Cobbler 代码注入漏洞 |
Showing top 20 of 42 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2021-35296
No comments yet