6.5

CVE-2016-9494

Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, are potentially vulnerable to improper input validation. The device's advanced status web page that is linked to from the basic status web page does not appear to properly parse malformed GET requests. This may lead to a denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Hughes ≫ Hn7740s Firmware Version6.9.0.34
   Hughes ≫ Hn7740s Version-
Hughes ≫ Dw7000 Firmware Version6.9.0.34
   Hughes ≫ Dw7000 Version-
Hughes ≫ Hn7000s Firmware Version6.9.0.34
   Hughes ≫ Hn7000s Version-
Hughes ≫ Hn7000sm Firmware Version6.9.0.34
   Hughes ≫ Hn7000sm Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.24% 0.469
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.5 2.8 3.6
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov 3.3 6.5 2.9
AV:A/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://www.kb.cert.org/vuls/id/614751
Third Party Advisory
US Government Resource
https://www.securityfocus.com/bid/96244
Third Party Advisory
VDB Entry