CVE-2017-16887

critical · 9.8

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password.

9.8

CVSS

36.6%

EPSS (exploit prob.)

98th

EPSS percentile

2018-01-12

Published

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-275

Affected products

Vendor	Product	Affected versions
fiberhome	lm53q1_firmware	vh519r05c01s38
fiberhome	lm53q1	all versions

Check a specific version with /api/v1/cve/match.

References

http://seclists.org/fulldisclosure/2018/Jan/28
https://www.exploit-db.com/exploits/43460/
http://seclists.org/fulldisclosure/2018/Jan/28
https://www.exploit-db.com/exploits/43460/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2017-16887