What’s Vulnerable › Vulnerabilities

CVE-2020-11447

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-11-17 · updated 2026-06-17
• Weakness: CWE-200

Description

An issue was discovered on Bell HomeHub 3000 SG48222070 devices. Remote authenticated users can retrieve the serial number via cgi/json-req - this is an information leak because the serial number is intended to prove an actor's physical access to the device.

Affected products

• Bell Home Hub 3000 Firmware: sg48222070

References

• https://0xem.ma/posts/HH3K-CVE/
• https://support.bell.ca/Internet/Connection-help/Access_control_in_the_Home_Hub_modems
• https://0xem.ma/posts/HH3K-CVE/
• https://support.bell.ca/Internet/Connection-help/Access_control_in_the_Home_Hub_modems

Get alerted when CVE-2020-11447 or the next vulnerability affects your stack