CVE-2017-7315

9.8 criticalEPSS 2.1%

An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use credentials, and the router credentials are stored in plaintext inside the backup, aka GatewaySettings.bin.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWEs: CWE-306, CWE-522
Published: 2017-07-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

humaxdigital:hg100r_firmware

References

http://seclists.org/fulldisclosure/2017/Jun/45
http://seclists.org/fulldisclosure/2017/Jun/45

Check your stack JSON