CVE-2019-7746

CVE-2019-7746 describes an authentication bypass vulnerability in JioFi 4 jmr1140 devices (Amtel_JMR1140_R12.07 firmware). Remote attackers can obtain an admin token by sending a specific request, which then allows them to change Wi-Fi passwords or perform a factory reset. This vulnerability is rated 8.1 HIGH on the CVSS scale, indicating a severe risk. It requires no authentication and has low attack complexity, with a high impact on confidentiality and integrity, as an attacker can gain full control over the device's settings. There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.