medium6.5
CVE-2016-9496
Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, lacks authentication.
Impact
Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, lacks authentication. An unauthenticated user may send an HTTP GET request to http://[ip]/com/gatewayreset or http://[ip]/cgi/reboot.bin to cause the modem to reboot.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Hughes | Hn7740s Firmware | Version 6.9.0.34 |
| Hughes | Dw7000 Firmware | Version 6.9.0.34 |
| Hughes | Hn7000s Firmware | Version 6.9.0.34 |
| Hughes | Hn7000sm Firmware | Version 6.9.0.34 |