What is CVE-2017-16886?

CVE-2017-16886 is a high-severity vulnerability in Fiberhome Lm53q1, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2018-01-12.

How severe is CVE-2017-16886?

High severity. CVSS v3 base score is 8.8 out of 10.

CSRF in Fiberhome Lm53q1

CVE-2017-16886

The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services via CSRF can result in an unauthorized change of username or password of the administrator of the portal.

Vulnerability class: CSRF (Cross-Site Request Forgery)

Published 2018-01-12 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

EPSS exploit prediction

EPSS: 0.071 (94.0th percentile), scored 2026-09-30.

Low probability of exploitation in the next 30 days, but still tracked. 94th percentile — 94.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.071 · newest: 0.071 · change: 0.000

Affected products

Fiberhome Lm53q1
Fiberhome Lm53q1 Firmware — versions vh519r05c01s38

Weakness classification (CWE)

CWE-352 — Cross-Site Request Forgery (CSRF)

References

www.exploit-db.com/exploits/43460/ (Exploit, VDB Entry, Third Party Advisory, exploit)
seclists.org/fulldisclosure/2018/Jan/28 (mailing-list, Mailing List, Third Party Advisory)

Frequently asked questions

What is CVE-2017-16886?: CVE-2017-16886 is a high-severity vulnerability in Fiberhome Lm53q1, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.8/10. Published 2018-01-12.
How severe is CVE-2017-16886?: High severity. CVSS v3 base score is 8.8 out of 10.