CVE-2017-16887 — CRITICAL (9.8)

Vulnerability Description

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password.

CVSS Score

9.8

CRITICAL

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Fiberhome	Lm53Q1 Firmware	vh519r05c01s38
Fiberhome	Lm53Q1	-

Related Weaknesses (CWE)

CWE-275

References

http://seclists.org/fulldisclosure/2018/Jan/28Mailing ListThird Party Advisory
https://www.exploit-db.com/exploits/43460/ExploitThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2018/Jan/28Mailing ListThird Party Advisory
https://www.exploit-db.com/exploits/43460/ExploitThird Party AdvisoryVDB Entry

FAQ

What is CVE-2017-16887?

CVE-2017-16887 is a vulnerability with a CVSS score of 9.8 (CRITICAL). The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure o...

How severe is CVE-2017-16887?

CVE-2017-16887 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2017-16887?

Check the references section above for vendor advisories and patch information. Affected products include: Fiberhome Lm53Q1 Firmware, Fiberhome Lm53Q1.