Back to Database
Status published
High
CVE-2017-16886
The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38...
Vulnerability Description
The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services via CSRF can result in an unauthorized change of username or password of the administrator of the portal.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-16886
Credits & Attribution
No credits recorded in the NVD database.
References
More from fiberhome
View All →CVE-2022-38814
A stored cross-site scripting (XSS) vulnerability in the auth_settings component...
Medium
5.4
CVE-2022-36200
In FiberHome VDSL2 Modem HG150-Ub_V3.0, Credentials of Admin are submitted...
High
7.5
CVE-2021-42912
FiberHome ONU GPON AN5506-04-F RP2617 is affected by an OS...
High
8.8
CVE-2021-41946
In FiberHome VDSL2 Modem HG150-Ub_V3.0, a stored cross-site scripting (XSS)...
Medium
5.4
CVE-2021-27179
An issue was discovered on FiberHome HG6245D devices through RP2613....
High
7.5
Affected Vendor
fiberhome
View all reports →Affected Software
lm53q1 firmware
Vulnerable Versions:
vh519r05c01s38
Timeline
Official Publish:
January 12th, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.