Starry S00111
2 CVEs affecting Starry S00111. Latest disclosed: 2019-06-10. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-13717 | High | 8.8 | 2019-06-10 | Starry Station (aka Starry Router) sets the Access-Control-Allow-Origin header to "*". This allows any hosted file on any domain to make calls to the device's… |
CVE-2017-13718 | High | 8.0 | 2019-06-10 | The HTTP API supported by Starry Station (aka Starry Router) allows brute forcing the PIN setup by the user on the device, and this allows an attacker to chang… |