Advisories · Technology
WNC T-Mobile 5G Box IDU.
Every CVE that names WNC T-Mobile 5G Box IDU among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · CVSS 9+
Authorized remote code execution via password change functionality in T-Mobile 5G Box IDU routers
- WNC T-Mobile 5G Box IDU
- Command injection
- CVSS 9.4 CriticalCritical · CVSS 9+
Unauthorized remote code execution in T-Mobile 5G Box IDU routers
- WNC T-Mobile 5G Box IDU
- Command injection
- CVSS 8.4 High
CSRF token bypass in T-Mobile 5G Box IDU routers
- WNC T-Mobile 5G Box IDU
- Cross-site request forgery (CSRF)
- CVSS 7.1 High
Config disclosure in T-Mobile 5G Box IDU routers
- WNC T-Mobile 5G Box IDU
- Authentication bypass
- CVSS 9.3 CriticalCritical · CVSS 9+
Command Injection in T-Mobile 5G Box IDU router via ping functionality
- WNC T-Mobile 5G Box IDU
- Command injection
- CVSS 8.7 High
Session auth bypass via cookie value in T-Mobile 5G Box IDU routers
- WNC T-Mobile 5G Box IDU
- Authentication bypass