CVEvulnerability

CVE-2016-9497

8.8 HIGH Published 2018-07-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-07-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
8.3 HIGH — AV:A/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-287, CWE-288

Description

Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, is vulnerable to an authentication bypass using an alternate path or channel. By default, port 1953 is accessible via telnet and does not require authentication. An unauthenticated remote user can access many administrative commands via this interface, including rebooting the modem.

Affected configurations

• hughes hn7740s firmware 6.9.0.34 • hughes dw7000 firmware 6.9.0.34 • hughes hn7000s firmware 6.9.0.34 • hughes hn7000sm firmware 6.9.0.34

Related

Weakness · CWE (2)

  • CWE-287 Improper Authentication weakness
  • CWE-288 Authentication Bypass Using an Alternate Path or Channel weakness

References