CRITICAL🇵🇱 Wersja polska

CVE-2017-16887

CVSS 9.8v3.0pub. 2018-01-12upd. 2024-11-21

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Fiberhome Lm53q1

    HW
    Fiberhome
    all versions

  • Fiberhome Lm53q1 Firmware

    OS
    Fiberhome
    vh519r05c01s38
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2017-16885CRITICAL9.8PL ✓same product

FiberHome LM53Q1 — nieautoryzowany dostęp do Portalu zarządzania

CVE-2017-16886HIGH8.8same product

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order t...

CVE-2025-63353CRITICAL9.8PL ✓same vendor

FiberHome HG6145F1 — przewidywalne domyślne hasło Wi-Fi na podstawie SSID

CVE-2021-27143CRITICAL9.8PL ✓same vendor

FiberHome HG6245D — zakodowane na stałe dane logowania w web daemon

CVE-2021-27141CRITICAL9.8PL ✓same vendor

FiberHome HG6245D — zakodowane na stałe klucze XOR do ochrony poświadczeń