CVE-2016-9496

CVE-2016-9496: Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, lacks authentication to access certain pages

Weakness CWE-306 · Missing auth

Published July 13, 2018

Last update August 6, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, lacks authentication. An unauthenticated user may send an HTTP GET request to http://[ip]/com/gatewayreset or http://[ip]/cgi/reboot.bin to cause the modem to reboot.

Key dates

02Disclosure timeline

July 13, 2018 CVE published

August 6, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2016-9496 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/306.html

Related vulnerabilities

04Related CVE

CVE-2026-26340 Tattile Smart+ / Vega / Basic <= 1.181.5 Unauthenticated RTSP Stream Disclosure CVE-2023-0052 SAUTER Controls Nova 200–220 Series Missing Authentication for Critical Function CVE-2025-23194 Missing Authentication check in SAP NetWeaver Enterprise Portal (OBN component) CVE-2026-50085 Aqara Board IoT insecure debug API CVE-2023-27257 Missing Authentication In IDAttend’s IDWeb Application