ac21000_g6_firmware vulnerabilities

4 known vulnerabilities in ac21000_g6_firmware from Connectize. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  ac21000_g6_firmware: Incorrect Authorization

  CVE-2023-24052Dec 4, 2023Connectize

  An issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via the change password functionality as it does not prompt for the current password.

• 9.8 Critical severity

  ac21000_g6_firmware: Improper Restriction of Excessive Authentication Attempts

  CVE-2023-24051Dec 4, 2023Connectize

  A client side rate limit issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via brute force style attacks.

• 9.8 Critical severity

  ac21000_g6_firmware: Weak Password Requirements

  CVE-2023-24049Dec 4, 2023Connectize

  An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges on the device via poor credential management.

• 8.8 High severity

  ac21000_g6_firmware: Cross-Site Request Forgery

  CVE-2023-24048Dec 4, 2023Connectize

  Cross Site Request Forgery (CSRF) vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via crafted GET request to /man_password.htm.