Design/Logic Flaw

2022-08-2915:15:00

PRIOn knowledge base

www.prio-n.com

design flaw

logic flaw

credential exposure

url submission

admin credentials

information sniffing

nvd

vdsl2 modem

7.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.3%

In FiberHome VDSL2 Modem HG150-Ub_V3.0, Credentials of Admin are submitted in URL, which can be logged/sniffed.

CPENameOperatorVersion
hg150-ub_firmwareeq3.0

CPE	Name	Operator	Version
	hg150-ub_firmware	eq	3.0

References

github.com/afaq1337/CVE-2022-36200

youtu.be/nHgstvq0rr8