CVE Vulnerabilities

CVE-2020-11447

Published: Nov 17, 2023 | Modified: Nov 25, 2023
CVSS 3.x
4.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

An issue was discovered on Bell HomeHub 3000 SG48222070 devices. Remote authenticated users can retrieve the serial number via cgi/json-req - this is an information leak because the serial number is intended to prove an actors physical access to the device.

Affected Software

Name Vendor Start Version End Version
Home_hub_3000_firmware Bell sg48222070 (including) sg48222070 (including)

References