CVE-2017-14147 in FiberHome AN1020-25

Resumen (Inglés)

An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which could allow an attacker to easily restore a router to its factory settings by simply browsing to the link http://[Default-Router-IP]/restoreinfo.cgi & execute it. Due to improper authentication on this page, the software accepts the request hence allowing attacker to reset the router to its default configurations which later could allow attacker to login to router by using default username/password.

Reservar

2017-09-05

Divulgación

2017-09-07

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
106184	FiberHome AN1020-25 Default Configuration restoreinfo.cgi Restore escalada de privilegios	254	Prueba de concepto	No está definido	CVE-2017-14147