CVE-2022-29729

High

Description

Verizon 4G LTE Network Extender GA4.38 - V0.4.038.2131 utilizes a weak default admin password generation algorithm which generates passwords that are accessible to unauthenticated attackers via the webUI login page.

SeverityHigh
CVSS7.5
Exploit probability—
ProductVerizon 4g Lte Network Extender Firmware
PublishedJun 2, 2022
First seenJun 2, 2022

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
verizon 4g_lte_network_extender_firmware0.4.038.2131, ga4.38—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.