CyberRota Analysis
AI-GeneratedThe WNC T-Mobile 5G Box IDU router is vulnerable due to an authentication bypass in the portal.cgi component, where the session verification mechanism fails to properly validate the sessionid cookie. This flaw allows attackers to gain unauthorized access to the administration panel by manipulating the cookie with directory traversal sequences. Organizations using this router should prioritize updating to firmware version 1.1.0.651412 to mitigate the risk of unauthorized access.
Original NVD Description
WNC T-Mobile 5G Box IDU router contains an authentication bypass vulnerability in the portal.cgi component. The session verification mechanism improperly validates the sessionid cookie by checking for the existence of a corresponding file in /tmp/login_user. An attacker can bypass authentication by using directory entries such as "." or ".." in the cookie, allowing unauthorized access to the administration panel.This issue has been fixed in firmware version 1.1.0.651412