An issue was discovered on Bell HomeHub 3000 SG48222070 devices. Remote authenticated users can retrieve the serial number via cgi/json-req - this is an information leak because the serial number is intended to prove an actors physical access to the device.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Home_hub_3000_firmware | Bell | sg48222070 (including) | sg48222070 (including) |