CVE-2017-7315

An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use credentials, and the router credentials are stored in plaintext inside the backup, aka GatewaySettings.bin.

CVSS v3 9.8 CRITICAL
CVSS v2.0 10.0 HIGH

9.8^/10

CVSS v3 : CRITICAL

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://seclists.org/fulldisclosure/2017/Jun/45	Exploit Mailing List VDB Entry
http://seclists.org/fulldisclosure/2017/Jun/45	Exploit Mailing List VDB Entry

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:humaxdigital:hg100r_firmware:2.0.6:*:*:*:*:*:*:*

cpe:2.3:h:humaxdigital:hg100r:-:*:*:*:*:*:*:*

History

21 Nov 2024, 03:31

Type	Values Removed	Values Added
References	~~() http://seclists.org/fulldisclosure/2017/Jun/45 - Exploit, Mailing List, VDB Entry~~	() http://seclists.org/fulldisclosure/2017/Jun/45 - Exploit, Mailing List, VDB Entry

Information

Published : 2017-07-04 02:29

Updated : 2024-11-21 03:31

NVD link : CVE-2017-7315

Mitre link : CVE-2017-7315

CVE.ORG link : CVE-2017-7315

JSON object : View

Products Affected

humaxdigital

hg100r_firmware
hg100r

CWE

CWE-306

Missing Authentication for Critical Function

CWE-522

Insufficiently Protected Credentials

{"id": "CVE-2017-7315", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": true, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2017-07-04T02:29:00.177", "references": [{"url": "http://seclists.org/fulldisclosure/2017/Jun/45", "tags": ["Exploit", "Mailing List", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://seclists.org/fulldisclosure/2017/Jun/45", "tags": ["Exploit", "Mailing List", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-306"}, {"lang": "en", "value": "CWE-522"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use credentials, and the router credentials are stored in plaintext inside the backup, aka GatewaySettings.bin."}, {"lang": "es", "value": "Se detect\u00f3 un problema en los dispositivos Humax Digital HG100R versi\u00f3n 2.0.6. Para descargar el archivo de copia de seguridad no es necesario utilizar credenciales, y las credenciales del router se almacenan en texto plano dentro de la copia de seguridad, tambi\u00e9n se conoce como GatewaySettings.bin."}], "lastModified": "2024-11-21T03:31:36.957", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:humaxdigital:hg100r_firmware:2.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5103D1DB-380D-4630-A67C-D394F1AB4D43"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:humaxdigital:hg100r:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "27C7D3F3-97D5-44EC-81AC-D6E05A940516"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}