PT-2017-17661 · Humax · Humax Digital Hg100R

The Gambler · Publicado 2017-07-04 · Atualizado 2017-07-07 · CVE-2017-7317

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Humax Digital HG100 version 2.0.6

Description An issue was discovered where an attacker can obtain the root credentials from the backup file, specifically GatewaySettings.bin.

Recommendations For Humax Digital HG100 version 2.0.6, consider changing the root credentials and restricting access to the backup file to minimize the risk of exploitation.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2017-7317

Produtos afetados

Humax Digital Hg100R

Referências · 3

• 🔥 http://seclists.org/fulldisclosure/2017/Jun/45 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-7317 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-7317 · Aviso do Fabricante