https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2017-11647.htmlhttps://patchthecve.com/cve/CVE-2017-11647.htmlWed, 17 Jun 2026 01:02:08 +0000MEDIUM 5.4: NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to stored cross-site scripting attacks. Creating an SSID with an XSS payload results in successful exploitation.https://patchthecve.com/cve/CVE-2017-11646.htmlhttps://patchthecve.com/cve/CVE-2017-11646.htmlWed, 17 Jun 2026 01:02:08 +0000HIGH 8.8: NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 are vulnerable to CSRF attacks, as demonstrated by using administration.html to disable the firewall. They does not contain any token that can mitigate CSRF vulnerabilities within the device.https://patchthecve.com/cve/CVE-2017-11645.htmlhttps://patchthecve.com/cve/CVE-2017-11645.htmlWed, 17 Jun 2026 01:02:08 +0000CRITICAL 9.8: NetComm Wireless 4GT101W routers with Hardware: 0.01 / Software: V1.1.8.8 / Bootloader: 1.1.3 do not require authentication for logfile.html, status.html, or system_config.html.https://patchthecve.com/cve/CVE-2017-5900.htmlhttps://patchthecve.com/cve/CVE-2017-5900.htmlWed, 17 Jun 2026 01:21:24 +0000MEDIUM 5.4: Cross-site scripting (XSS) vulnerability in the NetComm NB16WV-02 router with firmware NB16WV_R0.09 allows remote authenticated users to inject arbitrary web script or HTML via the S801F0334 parameter to hdd.htm.