PT-2017-12009 · Humax · Humax Wi-Fi Router Hg100R-*

Published 2017-07-19 · Updated 2021-06-21 · CVE-2017-11435

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Humax Wi-Fi Router model HG100R-* version 2.0.6

Description The issue allows for an authentication bypass via specially crafted requests to the management console. This can be exploited remotely when the router exposes the management console. The router fails to validate the session token for certain methods in the "/api" endpoint. An attacker can exploit this to retrieve sensitive information, including private and public IP addresses, SSID names, and passwords.

Recommendations For Humax Wi-Fi Router model HG100R-* version 2.0.6, consider restricting access to the management console to minimize the risk of exploitation. As a temporary workaround, avoid using the "/api" endpoint until a patch is available.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2017-11435

Affected Products

Humax Wi-Fi Router Hg100R-*

References · 5

• 🔥 https://exploit-db.com/exploits/42732 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-11435 · Security Note
• https://osv.dev/vulnerability/CVE-2017-11435 · Vendor Advisory
• https://trustwave.com/Resources/Security-Advisories/Advisories/Multiple-Vulnerabilities-in-Humax-Routers/?fid=9700 · Note
• https://hackertor.com/2017/07/19/na-cve-2017-11435-the-humax-wi-fi-router-model-hg100r-2-0-6-is · Note