Vulnerabilities (CVE)

Filtered by vendor Fiberhome Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-16887 1 Fiberhome 2 Lm53q1, Lm53q1 Firmware 2018-02-02 5.0 MEDIUM 9.8 CRITICAL
The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password.
CVE-2017-16886 1 Fiberhome 2 Lm53q1, Lm53q1 Firmware 2018-02-02 6.8 MEDIUM 8.8 HIGH
The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services via CSRF can result in an unauthorized change of username or password of the administrator of the portal.
CVE-2017-15647 1 Fiberhome 1 Routerfiberhome Firmware 2017-11-07 5.0 MEDIUM 7.5 HIGH
On FiberHome routers, Directory Traversal exists in /cgi-bin/webproc via the getpage parameter in conjunction with a crafted var:page value.