Design/Logic Flaw

An issue was discovered on Bell HomeHub 3000 SG48222070 devices. Remote authenticated users can retrieve the serial number via cgi/json-req - this is an information leak because the serial number is intended to prove an actor's physical access to the device...

CVE-2020-11448

An issue was discovered on Bell HomeHub 3000 SG48222070 devices. There is XSS related to the email field and the login page...

CVE-2020-11448: Improper Neutralization of Input During Web Page Generation

An issue was discovered on Bell HomeHub 3000 SG48222070 devices. There is XSS related to the email field and the login page...

CVE-2020-11447

The CVE-2020-11447 issue affects Bell HomeHub 3000 SG48222070. Remote authenticated users can retrieve the device serial number via the cgi/json-req endpoint, constituting an information leak intended to prove physical access. Impact is the exposure of hardware identity; no exploit details are pr...

CVE-2020-11447: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered on Bell HomeHub 3000 SG48222070 devices. Remote authenticated users can retrieve the serial number via cgi/json-req - this is an information leak because the serial number is intended to prove an actor's physical access to the device...