{"id":"CVE-2017-16887","aliases":["EUVD-2017-8058","GHSA-gxv9-245x-jpcq"],"status":"published","title":"The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web...","description":"The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password.","severity":{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.36627,"percentile":0.98508,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-275"],"published":"2018-01-12T17:00:00Z","modified":"2026-06-17T01:10:05Z","exploits":[{"source":"exploitdb","id":"EDB-43460","title":"FiberHome LM53Q1 - Multiple Vulnerabilities","type":"webapps","platform":"hardware","date":"2018-01-08","url":"https://www.exploit-db.com/exploits/43460"}],"products":[{"vendor":"fiberhome","product":"lm53q1_firmware"}],"references":[{"url":"https://www.exploit-db.com/exploits/43460/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","Third Party Advisory","VDB Entry"]},{"url":"http://seclists.org/fulldisclosure/2018/Jan/28","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-16887"},{"url":"https://github.com/advisories/GHSA-gxv9-245x-jpcq"}],"sources":{"cve":[{"id":"CVE-2017-16887","description":"The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password.","status":"published","published":"2018-01-12T17:00:00Z","modified":"2024-08-05T20:35:21.306Z","updated_at":"2026-11-02T14:33:21.453505Z"}],"euvd":[{"id":"EUVD-2017-8058","description":"The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password.","status":"published","published":"2018-01-12T17:00:00Z","modified":"2024-08-05T20:35:21Z","updated_at":"2026-11-03T02:23:11.095005Z"}],"ghsa":[{"id":"GHSA-gxv9-245x-jpcq","title":"The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web...","description":"The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password.","status":"published","published":"2022-05-14T03:47:07Z","modified":"2023-02-03T05:00:35Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T14:52:49.021794Z"}],"nvd":[{"id":"CVE-2017-16887","description":"The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password.","status":"published","published":"2018-01-12T17:29:00.99Z","modified":"2026-06-17T01:10:05.827Z","cvss":[{"version":"3.0","score":9.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-275"],"updated_at":"2026-11-02T14:04:13.257031Z"}]}}