CVE-2017-6896 EXPLOIT
8.8
HIGH · CVSS 3.0 · EPSS 3.7% (pctl 89)
Patch early
A public exploit exists.
Description
Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from user privilege to admin privilege just by modifying the Base64-encoded session cookie value.
Scoring
| CVSS | 8.8 (HIGH, v3.0) |
|---|---|
| Vector | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 3.7% — more likely to be exploited than 89% of all CVEs |
| Weakness | CWE-565 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2017-03-14 |
| Last modified | 2026-06-17 |
Affected (2)
| Vendor | Product |
|---|---|
| digisol | dg-hr1400 router |
| digisol | dg-hr1400 router firmware |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | DIGISOL DG-HR1400 1.00.02 Wireless Router - Privilege Escalation | 2017-03-18 |
References
- http://seclists.org/fulldisclosure/2017/Mar/52
- https://drive.google.com/file/d/0B6715xUqH18MX29uRlpaSVJ4OTA/view?usp=sharing
- https://packetstormsecurity.com/files/141693/digisol-escalate.txt
- https://www.exploit-db.com/exploits/41633/
- https://www.indrajithan.com/DIGISOL_router_previlage_escaltion
- http://seclists.org/fulldisclosure/2017/Mar/52
- https://drive.google.com/file/d/0B6715xUqH18MX29uRlpaSVJ4OTA/view?usp=sharing
- https://packetstormsecurity.com/files/141693/digisol-escalate.txt
- https://www.exploit-db.com/exploits/41633/
- https://www.indrajithan.com/DIGISOL_router_previlage_escaltion
→ the Explorer · watch your stack · NVD