CVE-2017-16887

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-01-12

Last modified

2024-08-05

Weaknesses

CWE-275

Affected products

• Lm53q1 Firmware (Fiberhome)

References

• http://seclists.org/fulldisclosure/2018/Jan/28
• https://www.exploit-db.com/exploits/43460/