Threats tagged 'ghsa-m5fr-9mf3-m8g7'

An authentication bypass vulnerability exists in the Universal Plug and Play (UPnP) framework of the Sercomm AOT-4221SR 4.6 Dual Band GPON ONU device. This flaw allows attackers to send arbitrary SOAP requests via port 5555 without requiring credentials, exposing 15 administrative, WAN, LAN, and firewall services. Exploitation can lead to modification of core routing tables, alteration of DNS servers, removal of firewall rules, and full network compromise.