Design/Logic Flaw

An issue was discovered on Bell HomeHub 3000 SG48222070 devices. Remote authenticated users can retrieve the serial number via cgi/json-req - this is an information leak because the serial number is intended to prove an actor's physical access to the device...

CVE-2020-11448

An issue was discovered on Bell HomeHub 3000 SG48222070 devices. There is XSS related to the email field and the login page...

CVE-2020-11447

The CVE-2020-11447 issue affects Bell HomeHub 3000 SG48222070. Remote authenticated users can retrieve the device serial number via the cgi/json-req endpoint, constituting an information leak intended to prove physical access. Impact is the exposure of hardware identity; no exploit details are pr...