CVE-2017-16523: Critical severity mitrastar gpt-2541gnac-n1 firmware vulnerability

Published Nov 3, 2017

Updated

MitraStar GPT-2541GNAC (HGU) 1.00(VNJ0)b1 and DSL-100HN-T1 ES113WJY0b16 devices have a zyad1234 password for the zyad1234 account, which is equivalent to root and undocumented.

Affected Software

4 affected components

MitraStar Gpt-2541gnac Firmware=1.00\(vnj0\)b1

MitraStar GPT-2541GNAC

MitraStar Dsl-100hn-t1 Firmware=es_113wjy0b16

MitraStar DSL-100HN-T1

Event History

Nov 3, 2017

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2017-16523?

CVE-2017-16523 is classified as a high severity vulnerability due to the use of an undocumented default password that provides root access.

How do I fix CVE-2017-16523?

To mitigate CVE-2017-16523, change the default password 'zyad1234' for the zyad1234 account to a strong and unique password.

What devices are affected by CVE-2017-16523?

CVE-2017-16523 affects MitraStar GPT-2541GNAC with firmware version 1.00(VNJ0)b1 and DSL-100HN-T1 with firmware version ES_113WJY0b16.

Is CVE-2017-16523 a remote vulnerability?

CVE-2017-16523 is not a remote vulnerability, as it requires access to the device's management interface.

What can happen if CVE-2017-16523 is not resolved?

If CVE-2017-16523 is not resolved, unauthorized users may gain root access, compromising the security and functionality of the affected devices.