CVE-2020-11447 - An issue was discovered on Bell HomeHub 3000 SG48222070 devices. Remote authenticated users can retr

CVE-2020-11447

Summary

An issue was discovered on Bell HomeHub 3000 SG48222070 devices. Remote authenticated users can retrieve the serial number via cgi/json-req - this is an information leak because the serial number is intended to prove an actor's physical access to the device.

References

https://support.bell.ca/Internet/Connection-help/Access_control_in_the_Home_Hub_modems
https://0xem.ma/posts/HH3K-CVE/

Vulnerable Configurations

cpe:2.3:o:bell:home_hub_3000_firmware:sg48222070:*:*:*:*:*:*:*
cpe:2.3:o:bell:home_hub_3000_firmware:sg48222070:*:*:*:*:*:*:*
cpe:2.3:h:bell:home_hub_3000:-:*:*:*:*:*:*:*
cpe:2.3:h:bell:home_hub_3000:-:*:*:*:*:*:*:*

CVSS

Base:	None
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication

Impact

Confidentiality	Integrity	Availability

Last major update

04-09-2024 - 21:35

Published

17-11-2023 - 12:15

Last modified

04-09-2024 - 21:35