Описание
Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, lacks authentication. An unauthenticated user may send an HTTP GET request to http://[ip]/com/gatewayreset or http://[ip]/cgi/reboot.bin to cause the modem to reboot.
Ссылки
- Third Party AdvisoryUS Government Resource
- Third Party AdvisoryVDB Entry
- Third Party AdvisoryUS Government Resource
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:hughes:hn7740s_firmware:6.9.0.34:*:*:*:*:*:*:*
cpe:2.3:h:hughes:hn7740s:-:*:*:*:*:*:*:*
Конфигурация 2
Одновременно
cpe:2.3:o:hughes:dw7000_firmware:6.9.0.34:*:*:*:*:*:*:*
cpe:2.3:h:hughes:dw7000:-:*:*:*:*:*:*:*
Конфигурация 3
Одновременно
cpe:2.3:o:hughes:hn7000s_firmware:6.9.0.34:*:*:*:*:*:*:*
cpe:2.3:h:hughes:hn7000s:-:*:*:*:*:*:*:*
Конфигурация 4
Одновременно
cpe:2.3:o:hughes:hn7000sm_firmware:6.9.0.34:*:*:*:*:*:*:*
cpe:2.3:h:hughes:hn7000sm:-:*:*:*:*:*:*:*
EPSS
Процентиль: 85%
0.02445
Низкий
6.5 Medium
CVSS3
6.1 Medium
CVSS2
Дефекты
CWE-306
CWE-306
Связанные уязвимости
CVSS3: 6.5
github
больше 3 лет назад
Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, lacks authentication. An unauthenticated user may send an HTTP GET request to http://[ip]/com/gatewayreset or http://[ip]/cgi/reboot.bin to cause the modem to reboot.
EPSS
Процентиль: 85%
0.02445
Низкий
6.5 Medium
CVSS3
6.1 Medium
CVSS2
Дефекты
CWE-306
CWE-306