Back to Database
Status published
Critical
CVE-2017-7315
An issue was discovered on Humax Digital HG100R 2.0.6 devices....
Vulnerability Description
An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use credentials, and the router credentials are stored in plaintext inside the backup, aka GatewaySettings.bin.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-7315
Credits & Attribution
No credits recorded in the NVD database.
More from humaxdigital
View All →CVE-2020-9477
An issue was discovered on HUMAX HGA12R-02 BRGCAA 1.1.53 devices....
Critical
9.8
CVE-2020-9370
HUMAX HGA12R-02 BRGCAA 1.1.53 devices allow Session Hijacking....
Critical
9.1
CVE-2020-27366
Cross Site Scripting (XSS) vulnerability in wlscanresults.html in Humax HGB10R-02...
Medium
6.1
CVE-2019-19890
An issue was discovered on Humax Wireless Voice Gateway HGB10R-2...
High
7.5
CVE-2019-19889
An issue was discovered on Humax Wireless Voice Gateway HGB10R-2...
High
7.5
Affected Vendor
humaxdigital
View all reports →Affected Software
hg100r firmware
Vulnerable Versions:
2.0.6
Timeline
Official Publish:
July 4th, 2017
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.