Hughes Broadband Satellite Modems Remote Detection

Detection of presence of Hughes Broadband Satellite Modem. The script attempts to determine if the remote host runs Hughes Broadband Satellite Modem from the telnet banner response. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and...

CVE-2016-9497

Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, is vulnerable to an authentication bypass using an alternate path or channel. By default, port 1953 is accessible via telnet and does not require authentication. An unauthenticated remote user can access many...

CVE-2016-9497: Authentication Bypass Using an Alternate Path or Channel

Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, is vulnerable to an authentication bypass using an alternate path or channel. By default, port 1953 is accessible via telnet and does not require authentication. An unauthenticated remote user can access many...

CVE-2016-9496: Missing Authentication for Critical Function

Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, lacks authentication. An unauthenticated user may send an HTTP GET request to http://ip/com/gatewayreset or http://ip/cgi/reboot.bin to cause the modem to reboot...

CVE-2016-9494: Improper Input Validation

Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, are potentially vulnerable to improper input validation. The device's advanced status web page that is linked to from the basic status web page does not appear to properly parse malformed GET requests. This may...

PT-2018-5086

Name of the Vulnerable Software and Affected Versions Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM Description The issue concerns a lack of authentication in the modems, allowing an unauthenticated user to send an HTTP GET request to specific API endpoints,...

PT-2018-5084

Name of the Vulnerable Software and Affected Versions Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM Description The issue is related to improper input validation. Specifically, the advanced status web page, which is linked to from the basic status web page,...

PT-2018-5087

Name of the Vulnerable Software and Affected Versions Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM Description The issue allows for an authentication bypass using an alternate path or channel. By default, port 1953 is accessible via telnet and does not...

PT-2018-5085

Name of the Vulnerable Software and Affected Versions Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM Description The issue concerns the use of hard-coded credentials in the devices. Access to the device can be obtained through the default telnet port 23 by...

CVE-2016-9495: Use of Hard-coded Credentials

Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, uses hard coded credentials. Access to the device's default telnet port 23 can be obtained through using one of a few default credentials shared among all devices...

Telnet Banner Reporting

This scripts reports the received banner of a Telnet service. SPDX-FileCopyrightText: 2005 SecuriTeam SPDX-FileCopyrightText: Reworked, improved and extended detection code and pattern since 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C...