CVE-2016-9497CWE-288

Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, is vulnerable to an authentication bypass using an alternate path or channel

published July 13, 2018

CVSS
—
EPSS
2%
Percentile
82.4
In the wild
Unconfirmed
What it is

Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, is vulnerable to an authentication bypass using an alternate path or channel. By default, port 1953 is accessible via telnet and does not require authentication. An unauthenticated remote user can access many administrative commands via this interface, including rebooting the modem.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02214 · 82.4th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2018-07-13T20:00Z
EPSS history
Timeline
  • 13 JUL 20:00Z
    Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, is vulnerable to an authentication bypass using an alternate path or channel
    cvelistv5