synced JUST NOW
01 Record

CVE-2017-14335

On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently sanitized, sending a PUT request to /ISAPI/Security/users/1 allows an admin password change.

UnratedPUBLISHEDCNA: mitre
CNA base scoreUnratedNo CNA CVSS vector

02 Description

On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently sanitized, sending a PUT request to /ISAPI/Security/users/1 allows an admin password change.

03 Exploitation and scoring

Exploitation
Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision
Not assessed by CISA
EPSS probability
27.83% probability of exploitation activity in the next 30 days.
EPSS percentile
Equal to or higher than the score of 98.0% of scored records. A rank, not a probability.
NVD base score
7.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NVD analysis status
Modified. NVD last modified this record on 2026-06-17.
Red Hat severity
No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published
2017-09-12 08:00Z9 YR AGO
Last updated
2024-08-05 19:20Z2 YR AGO
Reserved
2017-09-12
Assigning CNA
mitre
Record state
PUBLISHED
Severity
Not rated by the issuing CNA
CNA CVSS vector
Not published by the issuing CNA
Weaknesses
  • CWE-20Improper Input ValidationClass
Data version
5.1
Document digest
bc90d613f3a6a1415c24066e899d522b6373cea1b119c247938399e89f055ddf

05 Affected products

VendorProductVersionsPlatforms
hbgk7204xrNot specified—
hbgk7204xr_firmwareNot specified—
hbgk7208xrNot specified—
hbgk7208xr_firmwareNot specified—
hbgk7216xrNot specified—
hbgk7216xr_firmwareNot specified—
hbgkhb7004kNot specified—
hbgkhb7004k_firmwareNot specified—
hbgkhb7004khNot specified—
hbgkhb7004kh_firmwareNot specified—
hbgkhb7008kcNot specified—
hbgkhb7008kc_firmwareNot specified—
hbgkhb7008kceNot specified—
hbgkhb7008kce_firmwareNot specified—
hbgkhb7008khNot specified—
hbgkhb7008kh_firmwareNot specified—
hbgkhb7008kheNot specified—
hbgkhb7008khe_firmwareNot specified—
hbgkhb7008t2Not specified—
hbgkhb7008t2_firmwareNot specified—
hbgkhb7016lcNot specified—
hbgkhb7016lc_firmwareNot specified—
hbgkhb7016lhNot specified—
hbgkhb7016lh_firmwareNot specified—
hbgkhb7016t2Not specified—
hbgkhb7016t2_firmwareNot specified—
hbgkhb7024xtNot specified—
hbgkhb7024xt_firmwareNot specified—
hbgkhb7032xtNot specified—
hbgkhb7032xt_firmwareNot specified—
hbgkhb7108x3Not specified—
hbgkhb7108x3_firmwareNot specified—
hbgkhb7116x3Not specified—
hbgkhb7116x3_firmwareNot specified—
hbgkhb7204kkNot specified—
hbgkhb7204kk_firmwareNot specified—
hbgkhb7204klNot specified—
hbgkhb7204kl_firmwareNot specified—
hbgkhb7204xNot specified—
hbgkhb7204x_firmwareNot specified—
hbgkhb7204xtNot specified—
hbgkhb7204xt_firmwareNot specified—
hbgkhb7208xNot specified—
hbgkhb7208x3Not specified—
hbgkhb7208x3_firmwareNot specified—
hbgkhb7208x_firmwareNot specified—
hbgkhb7208xtNot specified—
hbgkhb7208xt_firmwareNot specified—
hbgkhb7216xNot specified—
hbgkhb7216x3Not specified—
hbgkhb7216x3_firmwareNot specified—
hbgkhb7216x_firmwareNot specified—
hbgkhb7216xtNot specified—
hbgkhb7216xt_firmwareNot specified—
hbgkhb7904Not specified—
hbgkhb7904_firmwareNot specified—
hbgkhb7904xNot specified—
hbgkhb7904x_firmwareNot specified—
hbgkhb7908Not specified—
hbgkhb7908_firmwareNot specified—

78 further entries not shown. The complete list is in the raw JSON document.

06 References