PT-2018-6358

CVE-2017-16887

·

Publicado

2018-01-12

·

Atualizado

2018-02-02

Descrição por

CVSS 3.1
9.8
Crítica
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: FiberHome Mobile WIFI Device Model LM53Q1 version VH519R05C01S38
Description: The issue concerns unauthorized access to web services on the device, which can lead to the disclosure of the WLAN key/password. The portal uses SOAP-based web services for interaction.
Recommendations: For FiberHome Mobile WIFI Device Model LM53Q1 version VH519R05C01S38, consider restricting access to the SOAP-based web services to minimize the risk of exploitation. Avoid using the device's web services until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾