ntpl-xpon1gfevn_firmware vulnerabilities

3 known vulnerabilities in ntpl-xpon1gfevn_firmware from Nepstech. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  ntpl-xpon1gfevn_firmware: Missing Encryption of Sensitive Data

  CVE-2024-42657Aug 19, 2024Nepstech

  An issue in wishnet Nepstech Wifi Router NTPL-XPON1GFEVN v1.0 allows a remote attacker to obtain sensitive information via the lack of encryption during login process

• 8.8 High severity

  ntpl-xpon1gfevn_firmware: Cross-Site Request Forgery

  CVE-2024-40119Jul 17, 2024Nepstech

  Nepstech Wifi Router xpon (terminal) model NTPL-Xpon1GFEVN v.1.0 Firmware V2.0.1 contains a Cross-Site Request Forgery (CSRF) vulnerability in the password change function, which allows remote attackers to change the admin password without the user's consent,

• 8.4 High severity

  ntpl-xpon1gfevn_firmware: Improper Control of Generation of Code

  CVE-2024-37855Jun 25, 2024Nepstech

  An issue in Nepstech Wifi Router xpon (terminal) NTPL-Xpon1GFEVN, hardware verstion 1.0 firmware 2.0.1 allows a remote attacker to execute arbitrary code via the router's Telnet port 2345 without requiring authentication credentials.