CVE:CVE-2021-39290
CNNVD:CNNVD-202108-1825
NetModule Router Software是NetModule的一款路由器。
NetModule Router Software 存在安全漏洞，该漏洞源于在 Web 界面上使用任意会话令牌 cookie 值，如果具有任意值的会话令牌可用，设备将不在登录过程中创建一个新的。攻击者可利用该漏洞来接管受害者的会话。
solution:Upgrade netmodule nb800_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb1600_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb1601_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb1800_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb1810_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb2700_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb2710_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb2800_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb2810_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb3700_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb3701_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb3710_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb3711_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb3720_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105); Upgrade netmodule nb3800_firmware to a higher version than 4.3.0.113,4.4.0.111,4.5.0.105,and avoid the version (,4.3.0.113),[4.4.0.0,4.4.0.111),[4.5.0.0,4.5.0.105)