High severity8.1NVD Advisory· Published May 7, 2019· Updated Jun 17, 2026
CVE-2019-7746
CVE-2019-7746
Description
JioFi 4 jmr1140 Amtel_JMR1140_R12.07 devices allow remote attackers to obtain an admin token by making a /cgi-bin/qcmap_auth type=getuser request and then reading the token field. This token value can then be used to change the Wi-Fi password or perform a factory reset.
Affected products
2- JioFi/JioFi 4description
- Range: R12.07
Patches
Vulnerability mechanics
References
2- packetstormsecurity.com/files/151656/Jiofi-4-JMR-1140-Admin-Token-Disclosure-Cross-Site-Request-Forgery.htmlnvdBroken LinkThird Party AdvisoryVDB Entry
- www.exploit-db.com/exploits/46365/nvdBroken LinkThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.