CVE-2017-16885

Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices intended for obtaining information about Internet Usage, Changing Passwords, etc. allows remote attackers to look for the information without authenticating. The information includes Version of device, Firmware...

Default credentials

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password...

CVE-2017-16887

CVE-2017-16887 affects FiberHome MIFI LM53Q1 (VH519R05C01S38). The issue stems from improper validation of a user-supplied request in the device portal, enabling a remote attacker to bypass security restrictions and change the Administrator account password. Public references in the bundle indica...

CVE-2017-16885

Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices intended for obtaining information about Internet Usage, Changing Passwords, etc. allows remote attackers to look for the information without authenticating. The information includes Version of device, Firmware...

CVE-2017-16885

CVE-2017-16885 involves FiberHome LM53Q1 VH519R05C01S38 devices with an improper permissions handling vulnerability in the Portal. This allows remote attackers to access information without authentication, including the device version, firmware ID, and the list of connected users with their MAC a...

CVE-2017-16886

CVE-2017-16886 describes a vulnerability in the FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 where the portal uses SOAP-based web services. The issue is unauthorized access to web services via CSRF, allowing an attacker to change the administrator’s username or password. This is a web...

FiberHome Mobile WIFI Device LM53Q1 Change Administrator Password Vulnerability

FiberHome Mobile WIFI Device LM53Q1 is a portable router device from China FiberHome. A security vulnerability exists in the portal in FiberHome Mobile WIFI Device LM53Q1 version VH519R05C01S38. An attacker can exploit the vulnerability to change the password or name of the portal administrator...

FiberHome Mobile WIFI Device LM53Q1 Information Disclosure Vulnerability

FiberHome Mobile WIFI Device LM53Q1 is a portable router device from China FiberHome. A security vulnerability exists in the portal of the FiberHome Mobile WIFI Device LM53Q1 VH519R05C01S38 version. The vulnerability can be exploited by an attacker to obtain a WLAN key/password...

FiberHome LM53Q1 - Multiple Vulnerabilities

Exploit for hardware platform in category web applications !/usr/bin/python Exploit Title: FiberHome MIFI LM53Q1 Multiple Vulnerabilities Exploit Author: Ibad Shah Vendor Homepage: www.fiberhome.com Version: VH519R05C01S38 Tested on: Linux Platform : Hardware CVE : CVE-2017-16885, CVE-2017-16886,...