← Back

CVE-2016-9494

nvd nist
Published: Jul 13, 2018Modified: Nov 21, 2024

JSON object

Loading...
6.5
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, are potentially vulnerable to improper input validation. The device's advanced status web page that is linked to from the basic status web page does not appear to properly parse malformed GET requests. This may lead to a denial of service.

Affected (4)

Hughes
4 products
Hn7740s Firmware
Dw7000 Firmware
Hn7000s Firmware
Hn7000sm Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Hn7740s Firmware
Version 6.9.0.34
Running on/withPlatform Versions
Hughes
Hn7740s
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Dw7000 Firmware
Version 6.9.0.34
Running on/withPlatform Versions
Hughes
Dw7000
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Hn7000s Firmware
Version 6.9.0.34
Running on/withPlatform Versions
Hughes
Hn7000s
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Hn7000sm Firmware
Version 6.9.0.34
Running on/withPlatform Versions
Hughes
Hn7000sm
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (4)

Source: cret@cert.org
Third Party AdvisoryUS Government Resource
Source: cret@cert.org
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.