VDB
GCVE-110-CERTCC-2017-350135
GCVE-110-CERTCC-2017-350135
Advisory PublishedCVSS 10.0/10
WiMAX routers from several vendors making use of a custom httpd plugin for libmtk are vulnerable to an authentication bypass allowing a remote, unauthenticated attacker to change the administrator password on the device.
Risk Scores
CVSS 2.0
10.0/10
Critical · AV:N/AC:L/Au:N/C:C/I:C/A:C
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact2d1_population2d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score9remediation_levelUreport_confidenceCenvironmental_score6.746283936target_distributionMenvironmental_vectorCDP:ND/TD:M/CR:ND/IR:ND/AR:ND
Aliases
References
Various WiMAX routers contain a authentication bypass vulnerability in custom libmtk httpd plugin
url
Various WiMAX routers contain a authentication bypass vulnerability in custom libmtk httpd plugin
url
Browse GCVE Records
73,196 records in the GCVE database · Updated July 17, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.