NOVUS AirGate 4G Incorrect Access Control Vulnerability Allowing Unauthenticated Credential Retrieval

A vulnerability exists in NOVUS AirGate 4G firmware version 1.1.16, specifically within the '/uci/get/' endpoint. This vulnerability is due to incorrect access control, which allows unauthenticated attackers to obtain administrator credentials by sending a crafted POST request. The endpoint fails to properly restrict access to sensitive information, creating a risk for unauthorized credential retrieval.

Impact

Exploitation of this vulnerability allows for the unauthorized retrieval of administrator credentials, which can lead to full administrative access on the device. With such access, an attacker could modify device configurations and potentially compromise the security of the network where the device is deployed.