CVE-2017-7317

An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin.

CVSS v3 9.8 CRITICAL
CVSS v2.0 10.0 HIGH

9.8^/10

CVSS v3 : CRITICAL

Vector : AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://seclists.org/fulldisclosure/2017/Jun/45	Exploit Mailing List VDB Entry
http://seclists.org/fulldisclosure/2017/Jun/45	Exploit Mailing List VDB Entry

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:humaxdigital:hg100r_firmware:2.0.6:*:*:*:*:*:*:*

cpe:2.3:h:humaxdigital:hg100r:-:*:*:*:*:*:*:*

History

21 Nov 2024, 03:31

Type	Values Removed	Values Added
References	~~() http://seclists.org/fulldisclosure/2017/Jun/45 - Exploit, Mailing List, VDB Entry~~	() http://seclists.org/fulldisclosure/2017/Jun/45 - Exploit, Mailing List, VDB Entry

Information

Published : 2017-07-04 02:29

Updated : 2024-11-21 03:31

NVD link : CVE-2017-7317

Mitre link : CVE-2017-7317

CVE.ORG link : CVE-2017-7317

JSON object : View

Products Affected

humaxdigital

hg100r_firmware
hg100r

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2017-7317", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": true, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "published": "2017-07-04T02:29:00.253", "references": [{"url": "http://seclists.org/fulldisclosure/2017/Jun/45", "tags": ["Exploit", "Mailing List", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://seclists.org/fulldisclosure/2017/Jun/45", "tags": ["Exploit", "Mailing List", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin."}, {"lang": "es", "value": "Se ha detectado un problema en los dispositivos Humax Digital HG100 versi\u00f3n 2.0.6. El atacante puede encontrar las credenciales root en el archivo de copia de seguridad, tambi\u00e9n se conoce como GatewaySettings.bin."}], "lastModified": "2024-11-21T03:31:37.257", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:humaxdigital:hg100r_firmware:2.0.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5103D1DB-380D-4630-A67C-D394F1AB4D43"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:humaxdigital:hg100r:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "27C7D3F3-97D5-44EC-81AC-D6E05A940516"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}