CVE-2017-6094

CVE-2017-6094 describes a critical vulnerability in Genexis B.V. GAPS up to version 7.2, where an attacker can forge valid authentication values for subscriber CPEs. This allows unauthorized access to other subscribers' configuration settings, which often contain sensitive credentials like VoIP username/passwords. With a CVSS score of 9.8 (Critical), this vulnerability is easily exploitable over the network with low complexity and no user interaction, leading to high impact on confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the potential for severe data compromise remains.