Nepstech vulnerabilities
We track 3 vulnerabilities in Nepstech products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on August 19, 2024.
Latest Nepstech vulnerabilities
- 7.5 High severity
ntpl-xpon1gfevn_firmware: Missing Encryption of Sensitive Data
An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the lack of encryption during login process
- 8.8 High severity
ntpl-xpon1gfevn_firmware: Cross-Site Request Forgery
Nepstech Wifi Router xpon (terminal) model NTPL-Xpon1GFEVN v.1.0 Firmware V2.0.1 contains a Cross-Site Request Forgery (CSRF) vulnerability in the password change function, which allows remote attackers to change the admin password without the user's consent,
- 8.4 High severity
ntpl-xpon1gfevn_firmware: Improper Control of Generation of Code
An issue in Nepstech Wifi Router xpon (terminal) NTPL-Xpon1GFEVN, hardware verstion 1.0 firmware 2.0.1 allows a remote attacker to execute arbitrary code via the router's Telnet port 2345 without requiring authentication credentials.