CVE-2017-3216: Huawei Technologies BM2022 vulnerability
Huawei Technologies · BM2022
Affected: Huawei Technologies BM2022 · Exploitation: possible (1 to 10%)
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 92% of scored CVEs
Not scored yet. The CVE record carries no CVSS score.
DescriptionCVE.org
WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote, unauthenticated attacker to gain administrator access to the device by performing an administrator password change on the device via a crafted POST request.
Affected products14
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Huawei Technologies · BM20222.10.14
- Huawei Technologies · HES-309MVersions not stated
- Huawei Technologies · HES-319MVersions not stated
- Huawei Technologies · HES-319M2WVersions not stated
- Huawei Technologies · HES-339MVersions not stated
- Green Packet · OX350Versions not stated
- ZTE · OX-330PVersions not stated
- ZyXEL · MAX218M2.00(UXG.0)D0
- ZyXEL · MAX218M1W2.00(UXE.3)D0
- ZyXEL · MAX218MW2.00(UXD.2)D0
- ZyXEL · MAX308M2.00(UUA.3)D0
- ZyXEL · MAX318MVersions not stated
- ZyXEL · MAX338MVersions not stated
- MADA · Soho Wireless Router2.10.13
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Possible (1 to 10%). EPSS between 1% and 10%.
- CISA KEV
- Not listed
- Public check
- No public nuclei template
- Vendor
- Huawei Technologies
- Published
- June 2017
CoverageNo articles yet
No CyberSIXT article names CVE-2017-3216 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.