Vulnerability Details CVE-2018-9249
FiberHome VDSL2 Modem HG 150-UB devices allow authentication bypass by ignoring the parent.location='login.html' JavaScript code in the response to an unauthenticated request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 66.0%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
Products affected by CVE-2018-9249
-
cpe:2.3:h:fiberhome:vdsl2_modem_hg_150-ub:-
-
cpe:2.3:o:fiberhome:vdsl2_modem_hg_150-ub_firmware:-