CVE-2020-11447

2023-11-1700:00:00

mitre

www.cve.org

cve-2020-11447

remote authenticated users

serial number retrieval

information leak

physical access

4.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.0%

JSON

An issue was discovered on Bell HomeHub 3000 SG48222070 devices. Remote authenticated users can retrieve the serial number via cgi/json-req - this is an information leak because the serial number is intended to prove an actor’s physical access to the device.