logo

Vulnerabilities in WNC T-Mobile 5G Box IDU routers

ID: 287e3b1b-0527-5f25-9e68-ae1b64aa1b61

STIX ID: report--287e3b1b-0527-5f25-9e68-ae1b64aa1b61

Feed Name: CERT Polska

Threat Score
75/100

Date Published: 2026-09-16

Date Updated: 2026-09-16

Author: CERT Polska

...
...

CERT Polska disclosed six vulnerabilities (six CVEs) in WNC T‑Mobile 5G Box IDU firmware: authentication bypass, multiple OS command injection flaws (including an unauthenticated root RCE), missing authentication allowing retrieval of admin credentials, and CSRF. All issues affect versions before 1.1.0.651412 and have been fixed in firmware 1.1.0.651412; reports were credited to Patryk Bogdan and Adam Borczyk.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.