4.3

CVE-2020-11447

Exploit
An issue was discovered on Bell HomeHub 3000 SG48222070 devices. Remote authenticated users can retrieve the serial number via cgi/json-req - this is an information leak because the serial number is intended to prove an actor's physical access to the device.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Bell ≫ Home Hub 3000 Firmware Version sg48222070
   Bell ≫ Home Hub 3000 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.65% 0.463
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 4.3 2.8 1.4
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://0xem.ma/posts/HH3K-CVE/
Exploit
https://support.bell.ca/Internet/Connection-help/Access_control_in_the_Home_Hub_modems
Product