CVE-2016-9496
Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, lacks authentication. An unauthenticated user may send an HTTP GET request to http://[ip]/com/gatewayreset or http://[ip]/cgi/reboot.bin to cause the modem to reboot.
Published:Jul 13, 2018
Last Modified:Nov 21, 2024
EPS:Jul 13, 2018
EPSS Score:0.02445
CVSS Score:6.5
Affected Products
Vendor
Product
Action
Vendor
Hughes
Product
Dw7000
Hughes
Dw7000
Vendor
Hughes
Product
Dw7000 Firmware
Hughes
Dw7000 Firmware
Vendor
Hughes
Product
Hn7000s
Hughes
Hn7000s
Vendor
Hughes
Product
Hn7000s Firmware
Hughes
Hn7000s Firmware
Vendor
Hughes
Product
Hn7000sm
Hughes
Hn7000sm
Vendor
Hughes
Product
Hn7000sm Firmware
Hughes
Hn7000sm Firmware
Vendor
Hughes
Product
Hn7740s
Hughes
Hn7740s
Vendor
Hughes
Product
Hn7740s Firmware
Hughes
Hn7740s Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
