CVE-2024-40119: Nepstech Ntpl-XPON1GFEVN Firmware

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Nepstech Wifi Router xpon (terminal) model NTPL-Xpon1GFEVN v.1.0 Firmware V2.0.1 contains a Cross-Site Request Forgery (CSRF) vulnerability in the password change function, which allows remote attackers to change the admin password without the user's consent, leading to a potential account takeover.

Affected products

• Nepstech Ntpl-XPON1GFEVN Firmware: version 2.0.1 only

Published 2024-07-17. Last modified 2026-06-17.