CVE-2016-9496
Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, lacks authentication. An unauthenticated user may send an HTTP GET request to http://[ip]/com/gatewayreset or http://[ip]/cgi/reboot.bin to cause the modem to reboot.
- Score
- CVSS 3.0 6.5 Medium
- Status
- Modified - cret@cert.org
- Published
- 2018-07-13
- Last modified
- 2024-08-06
- Weaknesses
- CWE-306
Affected products
- Dw7000 Firmware (Hughes)
- Hn7000s Firmware (Hughes)
- Hn7000sm Firmware (Hughes)
- Hn7740s Firmware (Hughes)
- Dw7000 (Hughes Satellite Modem)
- Hn7000ssm (Hughes Satellite Modem)
- Hn7740s (Hughes Satellite Modem)
References
- https://www.kb.cert.org/vuls/id/614751
- https://www.securityfocus.com/bid/96244
