Ubee EVW3226 up to 1.0.20 Configuration Backup file information disclosure

Summaryinfo

A vulnerability described as problematic has been identified in Ubee EVW3226 up to 1.0.20. This affects an unknown part of the component Configuration Backup Handler. Executing a manipulation can lead to file information disclosure. This vulnerability only affects products that are no longer supported by the maintainer. The identification of this vulnerability is CVE-2016-15056. The attack may be launched remotely. Furthermore, there is an exploit available. The application of restrictive firewalling is recommended.

Detailsinfo

A vulnerability has been found in Ubee EVW3226 up to 1.0.20 and classified as problematic. This vulnerability affects an unknown code block of the component Configuration Backup Handler. The manipulation with an unknown input leads to a file information disclosure vulnerability. The CWE definition for the vulnerability is CWE-538. The product places sensitive information into files or directories that are accessible to actors who are allowed to have access to the files, but not to the sensitive information. As an impact it is known to affect confidentiality. CVE summarizes:

Ubee EVW3226 cable modem/routers firmware versions up to and including 1.0.20 store configuration backup files in the web root after they are generated for download. These backup files remain accessible without authentication until the next reboot. A remote attacker on the local network can request 'Configuration_file.cfg' directly to obtain the backup archive. Because backup files are not encrypted, they expose sensitive information including the plaintext admin password, allowing full compromise of the device.

The weakness was shared by Gergely Eberhardt as 40156. The advisory is available at exploit-db.com. This vulnerability was named CVE-2016-15056 since 11/14/2025. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Technical details are unknown but a public exploit is available. This vulnerability is assigned to T1083 by the MITRE ATT&CK project.

It is possible to download the exploit at exploit-db.com. It is declared as proof-of-concept.

Proper firewalling of is able to address this issue.

The vulnerability is also documented in the databases at Exploit-DB (40156) and EUVD (EUVD-2016-10800). If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Vendor

• Ubee

Name

• EVW3226

Version

• 1.0.0
• 1.0.1
• 1.0.2
• 1.0.3
• 1.0.4
• 1.0.5
• 1.0.6
• 1.0.7
• 1.0.8
• 1.0.9
• 1.0.10
• 1.0.11
• 1.0.12
• 1.0.13
• 1.0.14
• 1.0.15
• 1.0.16
• 1.0.17
• 1.0.18
• 1.0.19
• 1.0.20

Support

• end of life

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion