CVE-2017-6094

CPEs used by subscribers on the access network receive their individual configuration settings from a central GAPS instance. A CPE identifies itself by the MAC address of its WAN interface and a certain "chk" value (48bit) derived from the MAC. The algorithm used to compute the "chk" was disclosed by reverse engineering the CPE's firmware. As a result, it is possible to forge valid "chk" values for any given MAC address and therefore receive the configuration settings of other subscribers' CPEs. The configuration settings often contain sensitive values, for example credentials (username/password) for VoIP services. This issue affects Genexis B.V. GAPS up to 7.2.

• CWE-200

• http://seclists.org/fulldisclosure/2017/Dec/62Exploit, Mailing List, Mitigation, Third Party Advisory
• http://seclists.org/fulldisclosure/2017/Dec/62Exploit, Mailing List, Mitigation, Third Party Advisory

Published

Dec 20, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6081A CSRF issue was discovered in Zammad before 1.0.4, 1.1.x be…
• CVE-2017-6086Multiple cross-site request forgery (CSRF) vulnerabilities i…
• CVE-2017-6087EyesOfNetwork ("EON") 5.0 and earlier allows remote authenti…
• CVE-2017-6088Multiple SQL injection vulnerabilities in EyesOfNetwork (aka…
• CVE-2017-6089SQL injection vulnerability in PhpCollab 2.5.1 and earlier a…
• CVE-2017-6090Unrestricted file upload vulnerability in clients/editclient…
• CVE-2017-6095A SQL injection issue was discovered in the Mail Masta (aka …
• CVE-2017-6096A SQL injection issue was discovered in the Mail Masta (aka …
• CVE-2017-6097A SQL injection issue was discovered in the Mail Masta (aka …
• CVE-2017-6098A SQL injection issue was discovered in the Mail Masta (aka …
• CVE-2017-6099Cross-site scripting (XSS) vulnerability in GetAuthDetails.h…
• CVE-2017-6100tcpdf before 6.2.0 uploads files from the server generating …