CVE-2019-11061

A broken access control vulnerability in HG100 firmware versions up to 4.00.06 allows an attacker in the same local area network to control IoT devices that connect with itself via http://target/smarthome/devicecontrol without any authentication. CVSS 3.0 base score 10 Confidentiality, Integrity...

PT-2019-12158

Name of the Vulnerable Software and Affected Versions HG100 firmware versions up to 4.00.06 Description A broken access control issue allows an attacker in the same local area network to control IoT devices without authentication by accessing the http://target/smarthome/devicecontrol endpoint...