GCVE - cpe:2.3:h:humaxdigital:hg100r:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:humaxdigital:hg100r:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Humaxdigital (`694e8371-74ed-547c-b0be-1eb6babe1cfd`)
Product	Hg100R (`83e2c26c-bc2d-5cc3-bd5e-b002bcac58e1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-7317`	not_vulnerable	2026-06-08 05:09:55.750636	Details available An issue was discovered on Humax Digital HG100 2.0.6 devices. The attacker can find the root credentials in the backup file, aka GatewaySettings.bin. Published: 2017-07-04T02:00:00.000Z Updated: 2024-08-05T15:56:36.430Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2017/Jun/45	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7316`	not_vulnerable	2026-06-08 05:09:55.750193	Details available An issue was discovered on Humax Digital HG100R 2.0.6 devices. There is XSS on the 404 page. Published: 2017-07-04T02:00:00.000Z Updated: 2024-08-05T15:56:36.432Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2017/Jun/45	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7315`	not_vulnerable	2026-06-08 05:09:55.749754	Details available An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use credentials, and the router credentials are stored in plaintext inside the backup, aka GatewaySettings.bin. Published: 2017-07-04T02:00:00.000Z Updated: 2024-08-05T15:56:36.389Z Open on db.gcve.eu Reference links http://seclists.org/fulldisclosure/2017/Jun/45	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-11435`	not_vulnerable	2026-06-08 05:08:37.593313	Details available The Humax Wi-Fi Router model HG100R-* 2.0.6 is prone to an authentication bypass vulnerability via specially crafted requests to the management console. The bug is exploitable remotely when the router is configured to expose the management console. The router is not validating the session token while returning answers for some methods in url '/api'. An attacker can use this vulnerability to retrieve sensitive information such as private/public IP addresses, SSID names, and passwords. Published: 2017-07-19T07:00:00.000Z Updated: 2024-08-05T18:12:39.857Z Open on db.gcve.eu Reference links https://www.trustwave.com/Resources/Security-Advisories/Advisories/Multiple-Vulnerabilities-in-Humax-Routers/?fid=9700	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.