Filtered by vendor Humaxdigital Subscriptions
Filtered by product Hg100r Firmware Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2017-7317 1 Humaxdigital 2 Hg100r, Hg100r Firmware 2024-11-21 N/A
An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin.
CVE-2017-7316 1 Humaxdigital 2 Hg100r, Hg100r Firmware 2024-11-21 N/A
An issue was discovered on Humax Digital HG100R 2.0.6 devices. There is XSS on the 404 page.
CVE-2017-7315 1 Humaxdigital 2 Hg100r, Hg100r Firmware 2024-11-21 N/A
An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use credentials, and the router credentials are stored in plaintext inside the backup, aka GatewaySettings.bin.
CVE-2017-11435 1 Humaxdigital 2 Hg100r, Hg100r Firmware 2024-11-21 9.8 Critical
The Humax Wi-Fi Router model HG100R-* 2.0.6 is prone to an authentication bypass vulnerability via specially crafted requests to the management console. The bug is exploitable remotely when the router is configured to expose the management console. The router is not validating the session token while returning answers for some methods in url '/api'. An attacker can use this vulnerability to retrieve sensitive information such as private/public IP addresses, SSID names, and passwords.