CVE-2017-14335 On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently sanitized, sending a PUT request to /ISAPI/Security/users/1 allows an admin password change.
HighCVSS 7.5
EPSS 27.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently sanitized, sending a PUT request to /ISAPI/Security/users/1 allows an admin password change.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hbgk hb7024xt firmware | All versions | No fix listed |
| hbgk hb7032xt firmware | All versions | No fix listed |
| hbgk hb7008t2 firmware | All versions | No fix listed |
| hbgk hb7016t2 firmware | All versions | No fix listed |
| hbgk hb7204xt firmware | All versions | No fix listed |
| hbgk hb7208xt firmware | All versions | No fix listed |
| hbgk hb7216xt firmware | All versions | No fix listed |
| hbgk hb7208x3 firmware | All versions | No fix listed |
| hbgk hb7216x3 firmware | All versions | No fix listed |
| hbgk hb7204x firmware | All versions | No fix listed |
| hbgk hb7208x firmware | All versions | No fix listed |
| hbgk hb7216x firmware | All versions | No fix listed |
| hbgk 7204xr firmware | All versions | No fix listed |
| hbgk 7208xr firmware | All versions | No fix listed |
| hbgk 7216xr firmware | All versions | No fix listed |
| hbgk hb7004k firmware | All versions | No fix listed |
| hbgk hb7004kh firmware | All versions | No fix listed |
| hbgk hb7008kc firmware | All versions | No fix listed |
| hbgk hb7008kce firmware | All versions | No fix listed |
| hbgk hb7008kh firmware | All versions | No fix listed |
| hbgk hb7008khe firmware | All versions | No fix listed |
| hbgk hb7204kl firmware | All versions | No fix listed |
| hbgk hb7204kk firmware | All versions | No fix listed |
| hbgk hb7016lc firmware | All versions | No fix listed |
| hbgk hb7016lh firmware | All versions | No fix listed |
Show 44 more
| Product | Affected versions | Fixed in |
|---|---|---|
| hbgk hb7116x3 firmware | All versions | No fix listed |
| hbgk hb7108x3 firmware | All versions | No fix listed |
| hbgk hb8004 firmware | All versions | No fix listed |
| hbgk hb8008 firmware | All versions | No fix listed |
| hbgk hb8016 firmware | All versions | No fix listed |
| hbgk hb8004r firmware | All versions | No fix listed |
| hbgk hb8008r firmware | All versions | No fix listed |
| hbgk hb8016r firmware | All versions | No fix listed |
| hbgk hb8204h firmware | All versions | No fix listed |
| hbgk hb8208h firmware | All versions | No fix listed |
| hbgk hb8216h firmware | All versions | No fix listed |
| hbgk hb8204hr firmware | All versions | No fix listed |
| hbgk hb8208hr firmware | All versions | No fix listed |
| hbgk hb8216hr firmware | All versions | No fix listed |
| hbgk hb8208x3 firmware | All versions | No fix listed |
| hbgk hb8216x3 firmware | All versions | No fix listed |
| hbgk hb8608x3 firmware | All versions | No fix listed |
| hbgk hb8616x3 firmware | All versions | No fix listed |
| hbgk hb8808x3 firmware | All versions | No fix listed |
| hbgk hb8816x3 firmware | All versions | No fix listed |
| hbgk hb9404x3 firmware | All versions | No fix listed |
| hbgk hb9408x3 firmware | All versions | No fix listed |
| hbgk hb9604x3 firmware | All versions | No fix listed |
| hbgk hb9608x3 firmware | All versions | No fix listed |
| hbgk hb9012x3 firmware | All versions | No fix listed |
| hbgk hb9020x3 firmware | All versions | No fix listed |
| hbgk hb9212x3 firmware | All versions | No fix listed |
| hbgk hb9220x3 firmware | All versions | No fix listed |
| hbgk hb7904 firmware | All versions | No fix listed |
| hbgk hb7908 firmware | All versions | No fix listed |
| hbgk hb7916s firmware | All versions | No fix listed |
| hbgk hb7904x firmware | All versions | No fix listed |
| hbgk hb7908x firmware | All versions | No fix listed |
| hbgk hb7916sx firmware | All versions | No fix listed |
| hbgk hb9904 firmware | All versions | No fix listed |
| hbgk hb9908 firmware | All versions | No fix listed |
| hbgk hb9912 firmware | All versions | No fix listed |
| hbgk hb9916 firmware | All versions | No fix listed |
| hbgk hb9924 firmware | All versions | No fix listed |
| hbgk hb9932 firmware | All versions | No fix listed |
| hbgk hb9808n04 firmware | All versions | No fix listed |
| hbgk hb9816n08 firmware | All versions | No fix listed |
| hbgk hb9824n16 firmware | All versions | No fix listed |
| hbgk hb9832n16 firmware | All versions | No fix listed |
References
- blogs.securiteam.com exploit third-party-advisory