CVE-2017-3216

WiMAX routers based on the MediaTek SDK (libmtk) that use a custom httpd plugin are vulnerable to an authentication bypass allowing a remote, unauthenticated attacker to gain administrator access to the device by performing an administrator password change on the device via a crafted POST request.

• CWE-306
• CWE-306

• http://blog.sec-consult.com/2017/06/ghosts-from-past-authentication-bypass.htmlThird Party Advisory
• http://www.kb.cert.org/vuls/id/350135Mitigation, Third Party Advisory, US Government Resource
• https://sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170607-0_Various_WiMAX_CPEs_Authentication_Bypass_v10.txtExploit, Third Party Advisory
• http://blog.sec-consult.com/2017/06/ghosts-from-past-authentication-bypass.htmlThird Party Advisory
• http://www.kb.cert.org/vuls/id/350135Mitigation, Third Party Advisory, US Government Resource
• https://sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20170607-0_Various_WiMAX_CPEs_Authentication_Bypass_v10.txtExploit, Third Party Advisory

Published

Jun 20, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-3210Applications developed using the Portrait Display SDK, versi…
• CVE-2017-3211Yopify, an e-commerce notification plugin, up to April 06, 2…5.3
• CVE-2017-3212The Space Coast Credit Union Mobile app 2.2 for iOS and 2.1.…5.9
• CVE-2017-3213The Think Mutual Bank Mobile Banking app 3.1.5 for iOS does …
• CVE-2017-3214The Milwaukee ONE-KEY Android mobile application stores the …7.5
• CVE-2017-3215The Milwaukee ONE-KEY Android mobile application uses bearer…
• CVE-2017-3217CalAmp LMU 3030 series OBD-II CDMA and GSM devices has an SM…
• CVE-2017-3218Samsung Magician 5.0 fails to validate TLS certificates for …
• CVE-2017-3219Acronis True Image up to and including version 2017 Build 80…
• CVE-2017-3221Blind SQL injection in Inmarsat AmosConnect 8 login form all…
• CVE-2017-3222Hard-coded credentials in AmosConnect 8 allow remote attacke…9.8
• CVE-2017-3223Dahua IP camera products using firmware versions prior to V2…