PT-2018-6358
CVE-2017-16887
·
Publicado
2018-01-12
·
Atualizado
2018-02-02
Descrição por
CVSS 3.1
9.8
CríticaMétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
FiberHome Mobile WIFI Device Model LM53Q1 version VH519R05C01S38
Description:
The issue concerns unauthorized access to web services on the device, which can lead to the disclosure of the WLAN key/password. The portal uses SOAP-based web services for interaction.
Recommendations:
For FiberHome Mobile WIFI Device Model LM53Q1 version VH519R05C01S38, consider restricting access to the SOAP-based web services to minimize the risk of exploitation. Avoid using the device's web services until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾