CVE-2017-16885

Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices intended for obtaining information about Internet Usage, Changing Passwords, etc. allows remote attackers to look for the information without authenticating. The information includes Version of device, Firmware...

CVE-2017-16887

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password...

CVE-2017-16886

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services via CSRF can result in an unauthorized change of username or password of the administrator of the portal...

Default credentials

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password...

EUVD-2017-8056

Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices intended for obtaining information about Internet Usage, Changing Passwords, etc. allows remote attackers to look for the information without authenticating. The information includes Version of device, Firmware...

CVE-2017-16886

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services via CSRF can result in an unauthorized change of username or password of the administrator of the portal...

CVE-2017-16885

CVE-2017-16885 involves FiberHome LM53Q1 VH519R05C01S38 devices with an improper permissions handling vulnerability in the Portal. This allows remote attackers to access information without authentication, including the device version, firmware ID, and the list of connected users with their MAC a...

CVE-2017-16886

CVE-2017-16886 describes a vulnerability in the FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 where the portal uses SOAP-based web services. The issue is unauthorized access to web services via CSRF, allowing an attacker to change the administrator’s username or password. This is a web...

CVE-2017-16887

CVE-2017-16887 affects FiberHome MIFI LM53Q1 (VH519R05C01S38). The issue stems from improper validation of a user-supplied request in the device portal, enabling a remote attacker to bypass security restrictions and change the Administrator account password. Public references in the bundle indica...

CVE-2017-16887

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password...

CVE-2017-16885

Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices intended for obtaining information about Internet Usage, Changing Passwords, etc. allows remote attackers to look for the information without authenticating. The information includes Version of device, Firmware...

PT-2018-6356

Name of the Vulnerable Software and Affected Versions: FiberHome LM53Q1 version VH519R05C01S38 Description: The issue is related to improper permissions handling in the portal of the affected device, allowing remote attackers to obtain sensitive information without authentication. This informatio...

CVE-2017-16885: Incorrect Permission Assignment for Critical Resource

Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices intended for obtaining information about Internet Usage, Changing Passwords, etc. allows remote attackers to look for the information without authenticating. The information includes Version of device, Firmware...

CVE-2017-16887: Undefined Security Weakness

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password...

PT-2018-6357

Name of the Vulnerable Software and Affected Versions: FiberHome Mobile WIFI Device Model LM53Q1 version VH519R05C01S38 Description: The issue concerns unauthorized access to web services via CSRF, which can lead to changes in the administrator's username or password. This is due to the use of...

PT-2018-6358

Name of the Vulnerable Software and Affected Versions: FiberHome Mobile WIFI Device Model LM53Q1 version VH519R05C01S38 Description: The issue concerns unauthorized access to web services on the device, which can lead to the disclosure of the WLAN key/password. The portal uses SOAP-based web...

CVE-2017-16886: Cross-Site Request Forgery (CSRF)

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services via CSRF can result in an unauthorized change of username or password of the administrator of the portal...

FiberHome Mobile WIFI Device LM53Q1 Information Disclosure Vulnerability

FiberHome Mobile WIFI Device LM53Q1 is a portable router device from China FiberHome. A security vulnerability exists in the portal of the FiberHome Mobile WIFI Device LM53Q1 VH519R05C01S38 version. The vulnerability can be exploited by an attacker to obtain a WLAN key/password...

FiberHome Mobile WIFI Device LM53Q1 Change Administrator Password Vulnerability

FiberHome Mobile WIFI Device LM53Q1 is a portable router device from China FiberHome. A security vulnerability exists in the portal in FiberHome Mobile WIFI Device LM53Q1 version VH519R05C01S38. An attacker can exploit the vulnerability to change the password or name of the portal administrator...

FiberHome LM53Q1 Information Disclosure Vulnerability

FiberHome LM53Q1 is a portable router device from China FiberHome. An information disclosure vulnerability exists in Portal in the FiberHome LM53Q1 VH519R05C01S38 version, which stems from the program's failure to properly handle privileges. A remote attacker can exploit the vulnerability to find...