CVE-2020-11447

EPSS 0.7%CWE-200

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

17 nov 2023Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

An issue was discovered on Bell HomeHub 3000 SG48222070 devices. Remote authenticated users can retrieve the serial number via cgi/json-req - this is an information leak because the serial number is intended to prove an actor's physical access to the device.

Produtos afetados

n/a · n/a

Referências

https://0xem.ma/posts/HH3K-CVE/https://support.bell.ca/Internet/Connection-help/Access_control_in_the_Home_Hub_modems