CyberRota Analysis
AI-GeneratedThe WNC T-Mobile 5G Box IDU router is susceptible to improper access control via the wnc_maccheck.cgi endpoint, which can be accessed without authentication. This vulnerability enables remote attackers to obtain sensitive configuration data, including the administrator password and WiFi passphrase, potentially compromising the device and network security. Users of this router should prioritize updating to firmware version 1.1.0.651412 to mitigate the risk.
Original NVD Description
WNC T-Mobile 5G Box IDU router is vulnerable to improper access control. The vulnerability exists in the wnc_maccheck.cgi endpoint, which is accessible without authentication. It allows a remote attacker to retrieve sensitive configuration data, including the administrator web password, WiFi passphrase, and technical device information.This issue has been fixed in firmware version 1.1.0.651412