610 matches found
Cross site request forgery (csrf)
The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services via CSRF can result in an unauthorized change of username or password of the administrator of the portal...
CVE-2017-16886
CVE-2017-16886 describes a vulnerability in the FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 where the portal uses SOAP-based web services. The issue is unauthorized access to web services via CSRF, allowing an attacker to change the administrator’s username or password. This is a web...
EUVD-2017-8056
Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices intended for obtaining information about Internet Usage, Changing Passwords, etc. allows remote attackers to look for the information without authenticating. The information includes Version of device, Firmware...
CVE-2017-16887
CVE-2017-16887 affects FiberHome MIFI LM53Q1 (VH519R05C01S38). The issue stems from improper validation of a user-supplied request in the device portal, enabling a remote attacker to bypass security restrictions and change the Administrator account password. Public references in the bundle indica...
CVE-2017-16885
CVE-2017-16885 involves FiberHome LM53Q1 VH519R05C01S38 devices with an improper permissions handling vulnerability in the Portal. This allows remote attackers to access information without authentication, including the device version, firmware ID, and the list of connected users with their MAC a...
CVE-2017-16885
Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices intended for obtaining information about Internet Usage, Changing Passwords, etc. allows remote attackers to look for the information without authenticating. The information includes Version of device, Firmware...
CVE-2017-16887
The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password...
CVE-2017-16886
The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services via CSRF can result in an unauthorized change of username or password of the administrator of the portal...
FiberHome LM53Q1 Information Disclosure Vulnerability
FiberHome LM53Q1 is a portable router device from China FiberHome. An information disclosure vulnerability exists in Portal in the FiberHome LM53Q1 VH519R05C01S38 version, which stems from the program's failure to properly handle privileges. A remote attacker can exploit the vulnerability to find...
FiberHome Mobile WIFI Device LM53Q1 Change Administrator Password Vulnerability
FiberHome Mobile WIFI Device LM53Q1 is a portable router device from China FiberHome. A security vulnerability exists in the portal in FiberHome Mobile WIFI Device LM53Q1 version VH519R05C01S38. An attacker can exploit the vulnerability to change the password or name of the portal administrator...
FiberHome Mobile WIFI Device LM53Q1 Information Disclosure Vulnerability
FiberHome Mobile WIFI Device LM53Q1 is a portable router device from China FiberHome. A security vulnerability exists in the portal of the FiberHome Mobile WIFI Device LM53Q1 VH519R05C01S38 version. The vulnerability can be exploited by an attacker to obtain a WLAN key/password...
FiberHome LM53Q1 - Multiple Vulnerabilities
Exploit for hardware platform in category web applications !/usr/bin/python Exploit Title: FiberHome MIFI LM53Q1 Multiple Vulnerabilities Exploit Author: Ibad Shah Vendor Homepage: www.fiberhome.com Version: VH519R05C01S38 Tested on: Linux Platform : Hardware CVE : CVE-2017-16885, CVE-2017-16886,...
FiberHome LM53Q1 - Multiple Vulnerabilities
FiberHome LM53Q1 - Multiple Vulnerabilities !/usr/bin/python /$$$$$$$$ /$$ /$$ /$$ /$$ /$$$$$$$ /$$ /$$$$$$$$ /$$ /$$ /$$ | $$/|/| $$ | $$ | $$ | $$ $$ | $$ | $$/ | $$ |/ | $$ | $$ /$$| $$$$$$$ /$$$$$$ /$$$$$$ | $$ | $$ /$$$$$$ /$$$$$$/$$$$ /$$$$$$ | $$ \ $$ /$$$$$$ /$$$$$$/$$$$ /$$$$$$ /$$$$$$...
FiberHome LM53Q1 - Multiple Vulnerabilities
!/usr/bin/python /$$$$$$$$ /$$ /$$ /$$ /$$ /$$$$$$$ /$$ /$$$$$$$$ /$$ /$$ /$$ | $$/|/| $$ | $$ | $$ | $$ $$ | $$ | $$/ | $$ |/ | $$ | $$ /$$| $$$$$$$ /$$$$$$ /$$$$$$ | $$ | $$ /$$$$$$ /$$$$$$/$$$$ /$$$$$$ | $$ \ $$ /$$$$$$ /$$$$$$/$$$$ /$$$$$$ /$$$$$$ /$$$$$$ | $$ /$$ /$$ /$$$$$$ | $$ /$$$$$$ /$$...
FiberHome MIFI LM53Q1 Information Disclosure / Password Change
!/usr/bin/python /$$$$$$$$ /$$ /$$ /$$ /$$ /$$$$$$$ /$$ /$$$$$$$$ /$$ /$$ /$$ | $$/|/| $$ | $$ | $$ | $$ $$ | $$ | $$/ | $$ |/ | $$ | $$ /$$| $$$$$$$ /$$$$$$ /$$$$$$ | $$ | $$ /$$$$$$ /$$$$$$/$$$$ /$$$$$$ | $$ \ $$ /$$$$$$ /$$$$$$/$$$$ /$$$$$$ /$$$$$$ /$$$$$$ | $$ /$$ /$$ /$$$$$$ | $$ /$$$$$$ /$$...
Multiple Router Directory Traversal Vulnerability (Nov 2017) - Active Check
Multiple home router products are prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FiberHome Router Directory Traversal Vulnerability
FiberHome routers are a router from FiberHome, a Chinese company. A directory traversal vulnerability exists in /cgi-bin/webproc in FiberHome routers. An attacker can exploit this vulnerability to obtain files on the router...
CVE-2017-15647
On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value...