What is CVE-2017-16886?

CVE-2017-16886 is a high-severity vulnerability in Fiberhome Lm53q1, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2018-01-12.

How severe is CVE-2017-16886?

High severity. CVSS v3 base score is 8.8 out of 10.

CSRF in Fiberhome Lm53q1

CVE-2017-16886

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services via CSRF can result in an unauthorized change of username or pass…

Vulnerability class: CSRF (Cross-Site Request Forgery)

EPSS: 0.071 (93.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Fiberhome Lm53q1
Fiberhome Lm53q1_firmware — versions vh519r05c01s38
N/a — versions n/a

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

cve@mitre.org (Exploit, VDB Entry, Third Party Advisory, exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (mailing-list, x_refsource_FULLDISC, Mailing List, Third Party Advisory)

Frequently asked questions

What is CVE-2017-16886?: CVE-2017-16886 is a high-severity vulnerability in Fiberhome Lm53q1, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2018-01-12.
How severe is CVE-2017-16886?: High severity. CVSS v3 base score is 8.8 out of 10.