Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2016-9497
Modified
More InfoOfficial Page
Source-cret@cert.org
View Known Exploited Vulnerability (KEV) details
Published At-13 Jul, 2018 | 20:29
Updated At-09 Oct, 2019 | 23:20

Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, is vulnerable to an authentication bypass using an alternate path or channel. By default, port 1953 is accessible via telnet and does not require authentication. An unauthenticated remote user can access many administrative commands via this interface, including rebooting the modem.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Primary3.08.8HIGH
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary2.08.3HIGH
AV:A/AC:L/Au:N/C:C/I:C/A:C
CPE Matches

hughes
hughes
>>hn7740s_firmware>>6.9.0.34
cpe:2.3:o:hughes:hn7740s_firmware:6.9.0.34:*:*:*:*:*:*:*
hughes
hughes
>>hn7740s>>-
cpe:2.3:h:hughes:hn7740s:-:*:*:*:*:*:*:*
hughes
hughes
>>dw7000_firmware>>6.9.0.34
cpe:2.3:o:hughes:dw7000_firmware:6.9.0.34:*:*:*:*:*:*:*
hughes
hughes
>>dw7000>>-
cpe:2.3:h:hughes:dw7000:-:*:*:*:*:*:*:*
hughes
hughes
>>hn7000s_firmware>>6.9.0.34
cpe:2.3:o:hughes:hn7000s_firmware:6.9.0.34:*:*:*:*:*:*:*
hughes
hughes
>>hn7000s>>-
cpe:2.3:h:hughes:hn7000s:-:*:*:*:*:*:*:*
hughes
hughes
>>hn7000sm_firmware>>6.9.0.34
cpe:2.3:o:hughes:hn7000sm_firmware:6.9.0.34:*:*:*:*:*:*:*
hughes
hughes
>>hn7000sm>>-
cpe:2.3:h:hughes:hn7000sm:-:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-287Primarynvd@nist.gov
CWE-288Secondarycret@cert.org
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://www.kb.cert.org/vuls/id/614751cret@cert.org
Third Party Advisory
US Government Resource
https://www.securityfocus.com/bid/96244cret@cert.org
Third Party Advisory
VDB Entry
Change History
0Changes found

Details not found