CVE-2017-14147

An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which could allow an attacker to easily restore a router to its factory…

published September 7, 2017

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.3th percentile for exploit probability.

CVSS
—
EPSS
66%
Percentile
99.3
In the wild
Unconfirmed
What it is

🚨 A simple URL is all it takes to reset your FiberHome router and take control! 😱 Think of it like a restaurant where anyone can walk in and ask for a reset on the kitchen to its original menu — the chef just makes it happen without even checking who's asking! An attacker could reset your router to factory settings, regaining access using the default username and password. This means they could alter your network settings, snoop on your internet traffic, and even kick you off your own network — absolutely devastating!

Put simply

Think of it like a restaurant where anyone can walk in and ask for a reset on the kitchen to its original menu — the chef just makes it happen without even checking who's asking! This vulnerability arises from improper authentication on the restoreinfo.cgi page, allowing unauthorized access to factory reset the router. Anyone with knowledge of the router's default IP can execute this action without any credentials.

What to do

An attacker could reset your router to factory settings, regaining access using the default username and password. This means they could alter your network settings, snoop on your internet traffic, and even kick you off your own network — absolutely devastating! To protect your network, change the router's default login credentials immediately. Consider disabling remote management features and apply any firmware updates provided by FiberHome to address this vulnerability. You've got this! With a few quick steps, you can secure your router and keep your network safe. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.65621 · 99.3th percentile
Published
2017-09-07T14:00Z
EPSS history
Timeline
  • 22 SEP 03:14Z
    EPSS moved 66% → 53%
    epss
  • 06 SEP 03:10Z
    EPSS moved 66% → 53%
    epss
  • 30 AUG 15:39Z
    EPSS moved 53% → 66%
    epss
  • 29 AUG 04:19Z
    EPSS moved 66% → 53%
    epss
  • 07 SEP 14:00Z
    An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which could allow an attacker to easily restore a router to its factory…
    cvelistv5