hg100 Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/hg100/ Sun, 26 Feb 2023 06:29:24 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png hg100 Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/hg100/ 32 32 CVE-2019-11060 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-11060/ Sun, 26 Feb 2023 06:29:24 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-11060/ The web api server on Port 8080 of ASUS HG100 firmware up to 1.05.12, which is vulnerable to Slowloris HTTP Denial of Service: an attacker can cause a Denial of Service (DoS) by sending headers very slowly to keep HTTP or HTTPS connections and associated resources alive for a long period of time. CVSS 3.0 […]

The post CVE-2019-11060 appeared first on CVE Vulnerability.

]]> The web api server on Port 8080 of ASUS HG100 firmware up to 1.05.12, which is vulnerable to Slowloris HTTP Denial of Service: an attacker can cause a Denial of Service (DoS) by sending headers very slowly to keep HTTP or HTTPS connections and associated resources alive for a long period of time. CVSS 3.0 Base score 7.4 (Availability impacts). CVSS vector: (CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H).

The post CVE-2019-11060 appeared first on CVE Vulnerability.

]]> CVE-2019-11061 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-11061/ Sun, 26 Feb 2023 06:29:24 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-11061/ A broken access control vulnerability in HG100 firmware versions up to 4.00.06 allows an attacker in the same local area network to control IoT devices that connect with itself via http://[target]/smarthome/devicecontrol without any authentication. CVSS 3.0 base score 10 (Confidentiality, Integrity and Availability impacts). CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

The post CVE-2019-11061 appeared first on CVE Vulnerability.

]]> A broken access control vulnerability in HG100 firmware versions up to 4.00.06 allows an attacker in the same local area network to control IoT devices that connect with itself via http://[target]/smarthome/devicecontrol without any authentication. CVSS 3.0 base score 10 (Confidentiality, Integrity and Availability impacts). CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

The post CVE-2019-11061 appeared first on CVE Vulnerability.

]]>