Security Bulletin: Vyatta 5600 vRouter Software Patches - Release 1801-za

Summary AT&T has released versions 1801-za for the Vyatta 5600. Details of these releases can be found at https://cloud.ibm.com/docs/infrastructure/virtual-router-appliance?topic=virtual-router-appliance-at-t-vyatta-5600-vrouter-software-patchesat-t-vyatta-5600-vrouter-software-patches...

CVE-2017-16886

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services via CSRF can result in an unauthorized change of username or password of the administrator of the portal...

CVE-2017-16887

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password...

CVE-2017-16885

Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices intended for obtaining information about Internet Usage, Changing Passwords, etc. allows remote attackers to look for the information without authenticating. The information includes Version of device, Firmware...

Default credentials

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password...

CVE-2017-16886

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services via CSRF can result in an unauthorized change of username or password of the administrator of the portal...

CVE-2017-16885

Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices intended for obtaining information about Internet Usage, Changing Passwords, etc. allows remote attackers to look for the information without authenticating. The information includes Version of device, Firmware...

CVE-2017-16885

CVE-2017-16885 involves FiberHome LM53Q1 VH519R05C01S38 devices with an improper permissions handling vulnerability in the Portal. This allows remote attackers to access information without authentication, including the device version, firmware ID, and the list of connected users with their MAC a...

CVE-2017-16886

CVE-2017-16886 describes a vulnerability in the FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 where the portal uses SOAP-based web services. The issue is unauthorized access to web services via CSRF, allowing an attacker to change the administrator’s username or password. This is a web...

CVE-2017-16887

CVE-2017-16887 affects FiberHome MIFI LM53Q1 (VH519R05C01S38). The issue stems from improper validation of a user-supplied request in the device portal, enabling a remote attacker to bypass security restrictions and change the Administrator account password. Public references in the bundle indica...

CVE-2017-16885: Incorrect Permission Assignment for Critical Resource

Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices intended for obtaining information about Internet Usage, Changing Passwords, etc. allows remote attackers to look for the information without authenticating. The information includes Version of device, Firmware...

PT-2018-6357

Name of the Vulnerable Software and Affected Versions: FiberHome Mobile WIFI Device Model LM53Q1 version VH519R05C01S38 Description: The issue concerns unauthorized access to web services via CSRF, which can lead to changes in the administrator's username or password. This is due to the use of...

PT-2018-6358

Name of the Vulnerable Software and Affected Versions: FiberHome Mobile WIFI Device Model LM53Q1 version VH519R05C01S38 Description: The issue concerns unauthorized access to web services on the device, which can lead to the disclosure of the WLAN key/password. The portal uses SOAP-based web...

PT-2018-6356

Name of the Vulnerable Software and Affected Versions: FiberHome LM53Q1 version VH519R05C01S38 Description: The issue is related to improper permissions handling in the portal of the affected device, allowing remote attackers to obtain sensitive information without authentication. This informatio...

CVE-2017-16886: Cross-Site Request Forgery (CSRF)

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services via CSRF can result in an unauthorized change of username or password of the administrator of the portal...

CVE-2017-16887: Undefined Security Weakness

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password...

FiberHome Mobile WIFI Device LM53Q1 Information Disclosure Vulnerability

FiberHome Mobile WIFI Device LM53Q1 is a portable router device from China FiberHome. A security vulnerability exists in the portal of the FiberHome Mobile WIFI Device LM53Q1 VH519R05C01S38 version. The vulnerability can be exploited by an attacker to obtain a WLAN key/password...

FiberHome Mobile WIFI Device LM53Q1 Change Administrator Password Vulnerability

FiberHome Mobile WIFI Device LM53Q1 is a portable router device from China FiberHome. A security vulnerability exists in the portal in FiberHome Mobile WIFI Device LM53Q1 version VH519R05C01S38. An attacker can exploit the vulnerability to change the password or name of the portal administrator...

FiberHome LM53Q1 Information Disclosure Vulnerability

FiberHome LM53Q1 is a portable router device from China FiberHome. An information disclosure vulnerability exists in Portal in the FiberHome LM53Q1 VH519R05C01S38 version, which stems from the program's failure to properly handle privileges. A remote attacker can exploit the vulnerability to find...

FiberHome LM53Q1 - Multiple Vulnerabilities

FiberHome LM53Q1 - Multiple Vulnerabilities !/usr/bin/python /$$$$$$$$ /$$ /$$ /$$ /$$ /$$$$$$$ /$$ /$$$$$$$$ /$$ /$$ /$$ | $$/|/| $$ | $$ | $$ | $$ $$ | $$ | $$/ | $$ |/ | $$ | $$ /$$| $$$$$$$ /$$$$$$ /$$$$$$ | $$ | $$ /$$$$$$ /$$$$$$/$$$$ /$$$$$$ | $$ \ $$ /$$$$$$ /$$$$$$/$$$$ /$$$$$$ /$$$$$$...