CVE-2017-14335

Published: Sep 12, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently sanitized, sending a PUT request to /ISAPI/Security/users/1 allows an admin password change.

Affected (69)

Products: Hbgk: Hb7024xt Firmware, Hb7032xt Firmware, Hb7008t2 Firmware, Hb7016t2 Firmware, Hb7204xt Firmware, Hb7208xt Firmware, Hb7216xt Firmware, Hb7208x3 Firmware, Hb7216x3 Firmware, Hb7204x Firmware, Hb7208x Firmware, Hb7216x Firmware, 7204xr Firmware, 7208xr Firmware, 7216xr Firmware, Hb7004k Firmware, Hb7004kh Firmware, Hb7008kc Firmware, Hb7008kce Firmware, Hb7008kh Firmware, Hb7008khe Firmware, Hb7204kl Firmware, Hb7204kk Firmware, Hb7016lc Firmware, Hb7016lh Firmware, Hb7116x3 Firmware, Hb7108x3 Firmware, Hb8004 Firmware, Hb8008 Firmware, Hb8016 Firmware, Hb8004r Firmware, Hb8008r Firmware, Hb8016r Firmware, Hb8204h Firmware, Hb8208h Firmware, Hb8216h Firmware, Hb8204hr Firmware, Hb8208hr Firmware, Hb8216hr Firmware, Hb8208x3 Firmware, Hb8216x3 Firmware, Hb8608x3 Firmware, Hb8616x3 Firmware, Hb8808x3 Firmware, Hb8816x3 Firmware, Hb9404x3 Firmware, Hb9408x3 Firmware, Hb9604x3 Firmware, Hb9608x3 Firmware, Hb9012x3 Firmware, Hb9020x3 Firmware, Hb9212x3 Firmware, Hb9220x3 Firmware, Hb7904 Firmware, Hb7908 Firmware, Hb7916s Firmware, Hb7904x Firmware, Hb7908x Firmware, Hb7916sx Firmware, Hb9904 Firmware, Hb9908 Firmware, Hb9912 Firmware, Hb9916 Firmware, Hb9924 Firmware, Hb9932 Firmware, Hb9808n04 Firmware, Hb9816n08 Firmware, Hb9824n16 Firmware, Hb9832n16 Firmware

69 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7024xt Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7024xt	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7032xt Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7032xt	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7008t2 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7008t2	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7016t2 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7016t2	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7204xt Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7204xt	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7208xt Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7208xt	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7216xt Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7216xt	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7208x3 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7208x3	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7216x3 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7216x3	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7204x Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7204x	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7208x Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7208x	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7216x Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7216x	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk 7204xr Firmware	All versions

Running on/with	Platform Versions
Hbgk 7204xr	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk 7208xr Firmware	All versions

Running on/with	Platform Versions
Hbgk 7208xr	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk 7216xr Firmware	All versions

Running on/with	Platform Versions
Hbgk 7216xr	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7004k Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7004k	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7004kh Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7004kh	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7008kc Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7008kc	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7008kce Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7008kce	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7008kh Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7008kh	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7008khe Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7008khe	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7204kl Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7204kl	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7204kk Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7204kk	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7016lc Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7016lc	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7016lh Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7016lh	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7116x3 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7116x3	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7108x3 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7108x3	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb8004 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb8004	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb8008 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb8008	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb8016 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb8016	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb8004r Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb8004r	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb8008r Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb8008r	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb8016r Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb8016r	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb8204h Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb8204h	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb8208h Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb8208h	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb8216h Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb8216h	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb8204hr Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb8204hr	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb8208hr Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb8208hr	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb8216hr Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb8216hr	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb8208x3 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb8208x3	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb8216x3 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb8216x3	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb8608x3 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb8608x3	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb8616x3 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb8616x3	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb8808x3 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb8808x3	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb8816x3 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb8816x3	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb9404x3 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb9404x3	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb9408x3 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb9408x3	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb9604x3 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb9604x3	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb9608x3 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb9608x3	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb9012x3 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb9012x3	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb9020x3 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb9020x3	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb9212x3 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb9212x3	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb9220x3 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb9220x3	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7904 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7904	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7908 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7908	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7916s Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7916s	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7904x Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7904x	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7908x Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7908x	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb7916sx Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb7916sx	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb9904 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb9904	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb9908 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb9908	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb9912 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb9912	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb9916 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb9916	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb9924 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb9924	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb9932 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb9932	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb9808n04 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb9808n04	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb9816n08 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb9816n08	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb9824n16 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb9824n16	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Hbgk Hb9832n16 Firmware	All versions

Running on/with	Platform Versions
Hbgk Hb9832n16	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://blogs.securiteam.com/index.php/archives/3420

Source: cve@mitre.org

ExploitThird Party Advisory

https://blogs.securiteam.com/index.php/archives/3420

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.