What’s Vulnerable › Vulnerabilities

CVE-2017-14000

• Severity: critical (CVSS 9.4 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-10-05 · updated 2026-06-17
• Weakness: CWE-287

Description

An Improper Authentication issue was discovered in Ctek SkyRouter Series 4200 and 4400, all versions prior to V6.00.11. By accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access the application without authenticating.

Affected products

• Ctekproducts Skyrouter Z4200 Firmware: through 6.00.05
• Ctekproducts Skyrouter Z4400 Firmware: through 6.00.05

References

• http://www.securityfocus.com/bid/100953
• https://ics-cert.us-cert.gov/advisories/ICSA-17-264-02
• http://www.securityfocus.com/bid/100953
• https://ics-cert.us-cert.gov/advisories/ICSA-17-264-02

Get alerted when CVE-2017-14000 or the next vulnerability affects your stack