Authentication flaw

An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which could allow an attacker to easily restore a router to its factory settings by simply browsing to the link http://Default-Router-IP/restoreinfo.cgi & execute it. Due to improper authentication on this page,...

CVE-2017-14147

The CVE-2017-14147 issue affects FiberHome AN1020-25 User End Routers. Affected component: the web page at restoreinfo.cgi, where improper authentication allows an unauthenticated user to trigger a factory reset, potentially enabling login with default credentials. Documented in multiple sources ...

FiberHome Unauthenticated ADSL Router Factory Reset Vulnerability

FiberHome suffers from an unauthenticated ADSL router factory reset vulnerability. Title: ==== FiberHome Unauthenticated ADSL Router Factory Reset. Credit: ====== Name: Ibad Shah Twitter: @BeeFaauBee09 Website: beefaaubee09.github.io CVE: ===== CVE-2017-14147 Date: ==== 05-09-2017 dd/mm/yyyy Abou...

PT-2017-13280

Name of the Vulnerable Software and Affected Versions FiberHome User End Routers version AN1020-25 Description An issue was discovered that could allow an attacker to easily restore a router to its factory settings by browsing to the "http://Default-Router-IP/restoreinfo.cgi" API endpoint and...

CVE-2017-14147: Improper Authentication

An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which could allow an attacker to easily restore a router to its factory settings by simply browsing to the link http://Default-Router-IP/restoreinfo.cgi & execute it. Due to improper authentication on this page,...

FiberHome Unauthenticated ADSL Router Factory Reset

Title: ==== FiberHome Unauthenticated ADSL Router Factory Reset. Credit: ====== Name: Ibad Shah Twitter: @BeeFaauBee09 Website: beefaaubee09.github.io CVE: ===== CVE-2017-14147 Date: ==== 05-09-2017 dd/mm/yyyy About FiberHome: ====== FiberHome Technologies is a leading equipment vendor and global...

FiberHome ADSL AN1020-25 - Improper Access Restrictions

FiberHome ADSL AN1020-25 - Improper Access Restrictions Title: ==== FiberHome Unauthenticated ADSL Router Factory Reset. Credit: ====== Name: Ibad Shah Twitter: @BeeFaauBee09 Website: beefaaubee09.github.io CVE: ===== CVE-2017-14147 Date: ==== 05-09-2017 dd/mm/yyyy About FiberHome: ====== FiberHo...

FiberHome ADSL AN1020-25 - Improper Access Restrictions

Title: ==== FiberHome Unauthenticated ADSL Router Factory Reset. Credit: ====== Name: Ibad Shah Twitter: @BeeFaauBee09 Website: beefaaubee09.github.io CVE: ===== CVE-2017-14147 Date: ==== 05-09-2017 dd/mm/yyyy About FiberHome: ====== FiberHome Technologies is a leading equipment vendor and global...

Struts2-045 Remote Code Execution Vulnerability in Fiberhome-Fiberhome Cloud Home

Beacon Cloud Home is a cloud service gateway system. A Struts2-045 remote code execution vulnerability exists in Fiberhome Communications - Fiberhome Cloud Home, which allows an attacker to gain server privileges by adding a payload for command execution when sending packets...

FiberHome Fengine S5800 Switches Denial of Service Vulnerability

FiberHome Fengine S5800 Switches are the new generation of Gigabit routing switches launched by FiberHome to meet the needs of multi-service access and high-density aggregation. With high-density Gigabit ports and 10 Gigabit uplink, this series of routers and switches can meet the diverse...

Design/Logic Flaw

An issue was discovered on FiberHome Fengine S5800 switches V210R240. An unauthorized attacker can access the device's SSH service, using a password cracking tool to establish SSH connections quickly. This will trigger an increase in the SSH login timeout each of the login attempts will occupy a...

CVE-2017-5544

An issue was discovered on FiberHome Fengine S5800 switches V210R240. An unauthorized attacker can access the device's SSH service, using a password cracking tool to establish SSH connections quickly. This will trigger an increase in the SSH login timeout each of the login attempts will occupy a...

CVE-2017-5544

CVE-2017-5544 affects FiberHome Fengine S5800 switches running V210R240. An unauthorized attacker can exploit SSH access by rapid password guessing, causing each login attempt to hold a connection slot longer and increasing the SSH login timeout. This leads to legitimate SSH/telnet login attempts...

CVE-2017-5544: Uncontrolled Resource Consumption

An issue was discovered on FiberHome Fengine S5800 switches V210R240. An unauthorized attacker can access the device's SSH service, using a password cracking tool to establish SSH connections quickly. This will trigger an increase in the SSH login timeout each of the login attempts will occupy a...

PT-2017-16571

Name of the Vulnerable Software and Affected Versions FiberHome Fengine S5800 switches version V210R240 Description An issue allows an unauthorized attacker to access the device's SSH service using a password cracking tool, leading to a denial of service. The repeated login attempts will occupy...

烽火（Fiberhome）HG-110 设备目录穿越漏洞

知道创宇安全研究团队 2015 . 03 . 31一.漏洞概要近期，国外安全研究员发布了针对全球 ADSL 设备存在目录穿越漏洞的研究网页链接1，这个漏洞早在 2011 年就被提出了，影响烽火（Fiberhome）HG-110 型号设备网页链接2，本着学习的态度，笔者对该漏洞进行了一番考证，写在这里。a）漏洞描述烽火（Fiberhome）HG-110 型号设备目录穿越漏洞网页链接3，是由于 webproc 文件在处理参数 getpage 传递过来的文件访问时没有合适过滤，导致用户可以利用 ../../ 跳转访问 web 目录之外的系统文件。b）漏洞分析烽火（Fiberhome）HG-11...

Beacon（Fiberhome）HG-1 1 0 device directory traversal vulnerability study-vulnerability warning-the black bar safety net

Know Chong Yu security research group 2 0 1 5 . 0 3 . 3 1 This article PDF Download: fiberhome HG-1 1 0 device recorded traversal vulnerability study 1. Updates Edition: first edition Time: 2015 / 3 / 31 Description: The first edition of the complete 2. Vulnerability summary Recently, foreign...

FiberHome-Modem-Router-HG-110

Exploit Title: Directory Path Traversal FiberHome Modem Router HG-110 / Remote Change DNS Servers Date: 22/09/2013 Exploit Author: Javier Perez - [email protected] - @thes41nt Vendor Homepage: http://hk.fiberhomegroup.com/ Version: HG110BHV1.6 import urllib import urllib2 ip = rawinput "Ent...

FiberHome Modem Router HG-110 - Authentication Bypass To Remote Change DNS Servers

No description provided by source. Exploit Title: Directory Path Traversal FiberHome Modem Router HG-110 / Remote Change DNS Servers Date: 22/09/2013 Exploit Author: Javier Perez - [email protected] - @thes41nt Vendor Homepage: http://hk.fiberhomegroup.com/ Version: HG110BHV1.6 PoC: Remote...

FiberHome Modem Router HG-110 Authentication Bypass

Exploit Title: Directory Path Traversal FiberHome Modem Router HG-110 / Remote Change DNS Servers Date: 22/09/2013 Exploit Author: Javier Perez - [email protected] - @thes41nt Vendor Homepage: http://hk.fiberhomegroup.com/ Version: HG110BHV1.6 PoC: Remote Change DNS Servers Example file...