Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-za

Summary AT&T has released versions 1801-za for the Vyatta 5600. Details of these releases can be found at https://cloud.ibm.com/docs/infrastructure/virtual-router-appliance?topic=virtual-router-appliance-at-t-vyatta-5600-vrouter-software-patchesat-t-vyatta-5600-vrouter-software-patches...

CVE-2017-16885

Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices intended for obtaining information about Internet Usage, Changing Passwords, etc. allows remote attackers to look for the information without authenticating. The information includes Version of device, Firmware...

Default credentials

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password...

CVE-2017-16886

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services via CSRF can result in an unauthorized change of username or password of the administrator of the portal...

CVE-2017-16887

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password...

CVE-2017-16886

CVE-2017-16886 describes a vulnerability in the FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 where the portal uses SOAP-based web services. The issue is unauthorized access to web services via CSRF, allowing an attacker to change the administrator’s username or password. This is a web...

CVE-2017-16885

CVE-2017-16885 involves FiberHome LM53Q1 VH519R05C01S38 devices with an improper permissions handling vulnerability in the Portal. This allows remote attackers to access information without authentication, including the device version, firmware ID, and the list of connected users with their MAC a...

CVE-2017-16886

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services via CSRF can result in an unauthorized change of username or password of the administrator of the portal...

CVE-2017-16885

Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices intended for obtaining information about Internet Usage, Changing Passwords, etc. allows remote attackers to look for the information without authenticating. The information includes Version of device, Firmware...

CVE-2017-16887

CVE-2017-16887 affects FiberHome MIFI LM53Q1 (VH519R05C01S38). The issue stems from improper validation of a user-supplied request in the device portal, enabling a remote attacker to bypass security restrictions and change the Administrator account password. Public references in the bundle indica...

FiberHome Mobile WIFI Device LM53Q1 Change Administrator Password Vulnerability

FiberHome Mobile WIFI Device LM53Q1 is a portable router device from China FiberHome. A security vulnerability exists in the portal in FiberHome Mobile WIFI Device LM53Q1 version VH519R05C01S38. An attacker can exploit the vulnerability to change the password or name of the portal administrator...

FiberHome LM53Q1 Information Disclosure Vulnerability

FiberHome LM53Q1 is a portable router device from China FiberHome. An information disclosure vulnerability exists in Portal in the FiberHome LM53Q1 VH519R05C01S38 version, which stems from the program's failure to properly handle privileges. A remote attacker can exploit the vulnerability to find...

FiberHome Mobile WIFI Device LM53Q1 Information Disclosure Vulnerability

FiberHome Mobile WIFI Device LM53Q1 is a portable router device from China FiberHome. A security vulnerability exists in the portal of the FiberHome Mobile WIFI Device LM53Q1 VH519R05C01S38 version. The vulnerability can be exploited by an attacker to obtain a WLAN key/password...

FiberHome LM53Q1 - Multiple Vulnerabilities

FiberHome LM53Q1 - Multiple Vulnerabilities !/usr/bin/python /$$$$$$$$ /$$ /$$ /$$ /$$ /$$$$$$$ /$$ /$$$$$$$$ /$$ /$$ /$$ | $$/|/| $$ | $$ | $$ | $$ $$ | $$ | $$/ | $$ |/ | $$ | $$ /$$| $$$$$$$ /$$$$$$ /$$$$$$ | $$ | $$ /$$$$$$ /$$$$$$/$$$$ /$$$$$$ | $$ \ $$ /$$$$$$ /$$$$$$/$$$$ /$$$$$$ /$$$$$$...

FiberHome LM53Q1 - Multiple Vulnerabilities

Exploit for hardware platform in category web applications !/usr/bin/python Exploit Title: FiberHome MIFI LM53Q1 Multiple Vulnerabilities Exploit Author: Ibad Shah Vendor Homepage: www.fiberhome.com Version: VH519R05C01S38 Tested on: Linux Platform : Hardware CVE : CVE-2017-16885, CVE-2017-16886,...

FiberHome LM53Q1 - Multiple Vulnerabilities

!/usr/bin/python /$$$$$$$$ /$$ /$$ /$$ /$$ /$$$$$$$ /$$ /$$$$$$$$ /$$ /$$ /$$ | $$/|/| $$ | $$ | $$ | $$ $$ | $$ | $$/ | $$ |/ | $$ | $$ /$$| $$$$$$$ /$$$$$$ /$$$$$$ | $$ | $$ /$$$$$$ /$$$$$$/$$$$ /$$$$$$ | $$ \ $$ /$$$$$$ /$$$$$$/$$$$ /$$$$$$ /$$$$$$ /$$$$$$ | $$ /$$ /$$ /$$$$$$ | $$ /$$$$$$ /$$...

FiberHome MIFI LM53Q1 Information Disclosure / Password Change

!/usr/bin/python /$$$$$$$$ /$$ /$$ /$$ /$$ /$$$$$$$ /$$ /$$$$$$$$ /$$ /$$ /$$ | $$/|/| $$ | $$ | $$ | $$ $$ | $$ | $$/ | $$ |/ | $$ | $$ /$$| $$$$$$$ /$$$$$$ /$$$$$$ | $$ | $$ /$$$$$$ /$$$$$$/$$$$ /$$$$$$ | $$ \ $$ /$$$$$$ /$$$$$$/$$$$ /$$$$$$ /$$$$$$ /$$$$$$ | $$ /$$ /$$ /$$$$$$ | $$ /$$$$$$ /$$...