CVE-2017-6896
UnknownEPSS 3.70%
Last modified
CVE-2017-6896 is a vulnerability of currently unknown severity. Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from user privilege to admin privilege just by modifying the Base64-encoded session cookie value.. EPSS estimates a 3.70% chance of exploitation in the next 30 days.
Description
Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from user privilege to admin privilege just by modifying the Base64-encoded session cookie value.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Digisol | Dg-Hr1400 Router Firmware | 1.00.02 |
References
- https://drive.google.com/file/d/0B6715xUqH18MX29uRlpaSVJ4OTA/view?usp=sharingThird Party Advisory
- https://www.indrajithan.com/DIGISOL_router_previlage_escaltionExploit, Third Party Advisory
- https://drive.google.com/file/d/0B6715xUqH18MX29uRlpaSVJ4OTA/view?usp=sharingThird Party Advisory
- https://www.indrajithan.com/DIGISOL_router_previlage_escaltionExploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-6896?
Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from user privilege to admin privilege just by modifying the Base64-encoded session cookie value.
How severe is CVE-2017-6896?
Severity scoring for CVE-2017-6896 is pending analysis. The EPSS model estimates a 3.70% probability of exploitation in the next 30 days.
How do I fix CVE-2017-6896?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-6889An integer overflow error within the "foveon_load_camf()" fu…
- CVE-2017-6890A boundary error within the "foveon_load_camf()" function (d…
- CVE-2017-6891Two errors in the "asn1_find_node()" function (lib/parser_au…8.8
- CVE-2017-6892In libsndfile version 1.0.28, an error in the "aiff_read_cha…
- CVE-2017-6894A vulnerability exists in FlexNet Manager Suite releases 201…7.8
- CVE-2017-6895USB Pratirodh allows remote attackers to conduct XML Externa…
- CVE-2017-6899The msm_bus_dbg_update_request_write function in drivers/pla…
- CVE-2017-6900An issue was discovered in Riello NetMan 204 14-2 and 15-2. …
- CVE-2017-6902Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2017-6903In ioquake3 before 2017-03-14, the auto-downloading feature …
- CVE-2017-6905An issue was discovered in concrete5 <= 5.6.3.4. The vulnera…
- CVE-2017-6906An issue was discovered in SiberianCMS before 4.10.0. The v…
Are you affected by CVE-2017-6896?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST