CVE-2017-11435 - CVE House
Back to Database
Status published Critical CVE-2017-11435

The Humax Wi-Fi Router model HG100R-* 2.0.6 is prone to...

Vulnerability Description

The Humax Wi-Fi Router model HG100R-* 2.0.6 is prone to an authentication bypass vulnerability via specially crafted requests to the management console. The bug is exploitable remotely when the router is configured to expose the management console. The router is not validating the session token while returning answers for some methods in url '/api'. An attacker can use this vulnerability to retrieve sensitive information such as private/public IP addresses, SSID names, and passwords.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-11435

Credits & Attribution

No credits recorded in the NVD database.

References

More from humaxdigital

View All →
CVE-2020-9477
An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices....
Critical 9.8
CVE-2020-9370
HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking....
Critical 9.1
CVE-2020-27366
Cross Site Scripting (XSS) vulnerability in wlscanresults.html in Humax HGB10R-02...
Medium 6.1
CVE-2019-19890
An issue was discovered on Humax Wireless Voice Gateway HGB10R-2...
High 7.5
CVE-2019-19889
An issue was discovered on Humax Wireless Voice Gateway HGB10R-2...
High 7.5

Affected Vendor

humaxdigital

View all reports →

Affected Software

hg100r firmware
Vulnerable Versions:
2.0.6

Timeline

Official Publish: July 19th, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.