CVE-2018-9249

FiberHome VDSL2 Modem HG 150-UB devices allow authentication bypass by ignoring the parent.location='login.html' JavaScript code in the response to an unauthenticated request.
References
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:fiberhome:vdsl2_modem_hg_150-ub_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:fiberhome:vdsl2_modem_hg_150-ub:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2018-04-04 15:29

Updated : 2023-12-10 12:30


NVD link : CVE-2018-9249

Mitre link : CVE-2018-9249

CVE.ORG link : CVE-2018-9249


JSON object : View

Products Affected

fiberhome

  • vdsl2_modem_hg_150-ub
  • vdsl2_modem_hg_150-ub_firmware
CWE
CWE-287

Improper Authentication