Vulnerability Details CVE-2017-14000
An Improper Authentication issue was discovered in Ctek SkyRouter Series 4200 and 4400, all versions prior to V6.00.11. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access the application without authenticating.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 76.6%
CVSS Severity
CVSS v3 Score 9.4
CVSS v2 Score 7.5
References
Products affected by CVE-2017-14000
-
cpe:2.3:h:ctekproducts:skyrouter_z4200:-
-
cpe:2.3:h:ctekproducts:skyrouter_z4400:-
-
cpe:2.3:o:ctekproducts:skyrouter_z4200_firmware:6.00.05
-
cpe:2.3:o:ctekproducts:skyrouter_z4400_firmware:6.00.05