CtekproductsCVEs & Vulnerabilities
2 CVEs affecting Ctekproducts products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
2 CVEs→ All vendors
Most Affected Products
skyrouter 2skyrouter z4200 1skyrouter z4200 firmware 1skyrouter z4400 1skyrouter z4400 firmware 1
CVE-2017-14000CRITICAL
An Improper Authentication issue was discovered in Ctek SkyRouter Series 4200 and 4400, all versions prior to V6.00.11. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access the application without authenticating.
5 Oct 2017
9.4
CVSS
CVE-2011-5010CRITICALpoc
apps/a3/cfg_ethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via shell metacharacters in the PINGADDRESS parameter for a "u" action.
25 Dec 2011
10.0
CVSS
← PrevPage 1 / 1Next →