Vulnerability Details CVE-2020-11447
An issue was discovered on Bell HomeHub 3000 SG48222070 devices. Remote authenticated users can retrieve the serial number via cgi/json-req - this is an information leak because the serial number is intended to prove an actor's physical access to the device.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 20.9%
CVSS Severity
CVSS v3 Score 4.3
References
Products affected by CVE-2020-11447
-
cpe:2.3:h:bell:home_hub_3000:-
-
cpe:2.3:o:bell:home_hub_3000_firmware:sg48222070