CVE-2017-14147

An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which could allow an attacker to easily restore a router to its factory settings by simply browsing to the link http://[Default-Router-IP]/restoreinfo.cgi & execute it. Due to improper authentication on this page, the software accepts the request hence allowing attacker to reset the router to its default configurations which later could allow attacker to login to router by using default username/password.

• CWE-287

• http://packetstormsecurity.com/files/144022/FiberHome-Unauthenticated-ADSL-Router-Factory-Reset.htmlExploit, Third Party Advisory, VDB Entry
• https://beefaaubee09.github.io/fiberhome-adsls-dos/
• https://www.exploit-db.com/exploits/42649/Exploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/144022/FiberHome-Unauthenticated-ADSL-Router-Factory-Reset.htmlExploit, Third Party Advisory, VDB Entry
• https://beefaaubee09.github.io/fiberhome-adsls-dos/
• https://www.exploit-db.com/exploits/42649/Exploit, Third Party Advisory, VDB Entry

Published

Sep 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-14140The move_pages system call in mm/migrate.c in the Linux kern…
• CVE-2017-14141The wiki_decode Developer System Helper function in the admi…7.2
• CVE-2017-14142Multiple cross-site scripting (XSS) vulnerabilities in Kaltu…
• CVE-2017-14143The getUserzoneCookie function in Kaltura before 13.2.0 uses…
• CVE-2017-14145HelpDEZk 1.1.1 has SQL Injection in app\modules\admin\contro…
• CVE-2017-14146HelpDEZk 1.1.1 allows remote authenticated users to execute …
• CVE-2017-14149GoAhead 3.4.0 through 3.6.5 has a NULL Pointer Dereference i…
• CVE-2017-14151An off-by-one error was discovered in opj_tcd_code_block_enc…8.8
• CVE-2017-14152A mishandled zero case was discovered in opj_j2k_set_cinema_…8.8
• CVE-2017-14153This vulnerability allows local attackers to escalate privil…
• CVE-2017-14156The atyfb_ioctl function in drivers/video/fbdev/aty/atyfb_ba…
• CVE-2017-14158Scrapy 1.4 allows remote attackers to cause a denial of serv…