What’s Vulnerable › Vulnerabilities

CVE-2017-16885

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 33.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-01-12 · updated 2026-06-17
• Weakness: CWE-732

Description

Improper Permissions Handling in the Portal on FiberHome LM53Q1 VH519R05C01S38 devices (intended for obtaining information about Internet Usage, Changing Passwords, etc.) allows remote attackers to look for the information without authenticating. The information includes Version of device, Firmware ID, Connected users to device along their MAC Addresses, etc.

Affected products

• FiberHome Lm53Q1 Firmware: vh519r05c01s38

References

• http://seclists.org/fulldisclosure/2018/Jan/28
• https://www.exploit-db.com/exploits/43460/
• http://seclists.org/fulldisclosure/2018/Jan/28
• https://www.exploit-db.com/exploits/43460/

Get alerted when CVE-2017-16885 or the next vulnerability affects your stack