CVE-2016-9497 Auth bypass in DW7000
Unauthenticated remote attackers can access administrative commands via telnet on port 1953, allowing them to reboot the modem or perform other privileged actions.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-9497?
CVE-2016-9497 is a high-severity authentication bypass vulnerability in Hughes Satellite Modem DW7000, published on 13 Jul 2018. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, is vulnerable to an authentication bypass using an alternate path or channel. By default, port 1953 is accessible via telnet and does not require authentication. An unauthenticated remote user can access many administrative commands via this interface, including rebooting the modem.
Which versions are affected by CVE-2016-9497?
It affects 4 products.
Products include Hughes Dw7000 Firmware, Hughes Hn7000s Firmware, Hughes Hn7000sm Firmware, Hughes Hn7740s Firmware.
How do I fix CVE-2016-9497?
No fix has been published for CVE-2016-9497 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2016-9497 being exploited?
There is no known exploitation of CVE-2016-9497 in the wild and no public exploit code.
Other vulnerabilities in Hughes Satellite Modem DW7000
Sources
Also known as GHSA-qq6r-2668-c4wg.