https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 19:50:45 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-01621 cnvd-2018-01621 https://cve.radiocsirt.org/vuln/cnvd-2018-01621 https://cve.radiocsirt.org/vuln/euvd-2026-73764 EUVD-2026-73764 https://cve.radiocsirt.org/vuln/euvd-2026-73764 https://cve.radiocsirt.org/vuln/fkie_cve-2017-6094 <p>CPEs used by subscribers on the access network receive their individual configuration settings from a central GAPS instance. A CPE identifies itself by the MAC address of its WAN interface and a certain &#34;chk&#34; value (48bit) derived from the MAC. The algorithm used to compute the &#34;chk&#34; was disclosed by reverse engineering the CPE&#39;s firmware. As a result, it is possible to forge valid &#34;chk&#34; values for any given MAC address and therefore receive the configuration settings of other subscribers&#39; CPEs. The configuration settings often contain sensitive values, for example credentials (username/password) for VoIP services. This issue affects Genexis B.V. GAPS up to 7.2.</p> <p>CPEs used by subscribers on the access network receive their individual configuration settings from a central GAPS instance. A CPE identifies itself by the MAC address of its WAN interface and a certain &#34;chk&#34; value (48bit) derived from the MAC. The algorithm used to compute the &#34;chk&#34; was disclosed by reverse engineering the CPE&#39;s firmware. As a result, it is possible to forge valid &#34;chk&#34; values for any given MAC address and therefore receive the configuration settings of other subscribers&#39; CPEs. The configuration settings often contain sensitive values, for example credentials (username/password) for VoIP services. This issue affects Genexis B.V. GAPS up to 7.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-6094 https://cve.radiocsirt.org/vuln/ghsa-wgvq-q9gr-9f24 <p>CPEs used by subscribers on the access network receive their individual configuration settings from a central GAPS instance. A CPE identifies itself by the MAC address of its WAN interface and a certain &#34;chk&#34; value (48bit) derived from the MAC. The algorithm used to compute the &#34;chk&#34; was disclosed by reverse engineering the CPE&#39;s firmware. As a result, it is possible to forge valid &#34;chk&#34; values for any given MAC address and therefore receive the configuration settings of other subscribers&#39; CPEs. The configuration settings often contain sensitive values, for example credentials (username/password) for VoIP services. This issue affects Genexis B.V. GAPS up to 7.2.</p> <p>CPEs used by subscribers on the access network receive their individual configuration settings from a central GAPS instance. A CPE identifies itself by the MAC address of its WAN interface and a certain &#34;chk&#34; value (48bit) derived from the MAC. The algorithm used to compute the &#34;chk&#34; was disclosed by reverse engineering the CPE&#39;s firmware. As a result, it is possible to forge valid &#34;chk&#34; values for any given MAC address and therefore receive the configuration settings of other subscribers&#39; CPEs. The configuration settings often contain sensitive values, for example credentials (username/password) for VoIP services. This issue affects Genexis B.V. GAPS up to 7.2.</p> https://cve.radiocsirt.org/vuln/ghsa-wgvq-q9gr-9f24 https://cve.radiocsirt.org/vuln/gsd-2017-6094 gsd-2017-6094 https://cve.radiocsirt.org/vuln/gsd-2017-6094