cveboard RSS feed

CVE-2018-25134

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2018
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

Synaccess netBooter NP-02x/NP-08x 6.8 Authentication Bypass via webNewAcct.cgi

Synaccess netBooter NP-02x/NP-08x 6.8 contains an authentication bypass vulnerability in the webNewAcct.cgi script that allows unauthenticated attackers to create admin user accounts. Attackers can exploit the missing control check by sending crafted POST requests to create administrative accounts and gain unauthorized control over power supply management.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

netBooter NP-02x/NP-08x

Vendor
Synaccess Networks Inc.
Product
netBooter NP-02x/NP-08x
Platforms
Unknown
Default status
Unknown
netBooter NP-02x/NP-08x · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
6.8CaffectedUnavailableUnavailableUnavailableNone listed
6.5CaffectedUnavailableUnavailableUnavailableNone listed
6.4BCaffectedUnavailableUnavailableUnavailableNone listed
6.4AaffectedUnavailableUnavailableUnavailableNone listed
6.10affectedUnavailableUnavailableUnavailableNone listed
5.53BCaffectedUnavailableUnavailableUnavailableNone listed