{"id":"CVE-2017-16887","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-16887","generatedAt":"2026-10-28T21:31:07.965Z","title":"Unauthorized Access to Web Services can result in disclosure of the WLAN key/password.","description":"The portal on FiberHome Mobile WIFI Device Model LM53Q1 VH519R05C01S38 uses SOAP based web services in order to interact with the portal. Unauthorized Access to Web Services can result in disclosure of the WLAN key/password.","published":"2018-01-12T17:29:01.000Z","lastModified":"2026-06-17T01:10:06.000Z","status":"Modified","sourceIdentifier":"cve@mitre.org","cvss":{"version":"3.0","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-275"],"affected":["fiberhome/lm53q1 firmware"],"epss":{"score":0.36627,"percentile":0.98491,"date":"2026-10-27","history":[{"date":"2026-09-21","score":0.26586,"percentile":0.97972},{"date":"2026-09-22","score":0.36627,"percentile":0.98429}]},"kev":{"listed":false},"exploits":{"count":1,"verified":false,"firstPublished":"2018-01-08","source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[{"edbId":43460,"kind":"exploit","title":"FiberHome LM53Q1 - Multiple Vulnerabilities","url":"https://www.exploit-db.com/exploits/43460","sourceUrl":"https://gitlab.com/exploit-database/exploitdb/-/blob/main/exploits/hardware/webapps/43460.py","file":"exploits/hardware/webapps/43460.py","published":"2018-01-08","added":"2018-01-08","updated":"2018-01-08","author":"Ibad Shah","type":"webapps","platform":"hardware","port":null,"verified":false,"codes":["CVE-2017-16887","CVE-2017-16886","CVE-2017-16885"],"tags":null,"aliases":null,"applicationUrl":null,"screenshotUrl":null,"referenceUrl":null}]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 36.6%, higher than 98% of all known CVEs. Patch or mitigate before the next change window."},"changes":[{"kind":"epss","label":"EPSS jump","at":"2026-09-22T00:00:00.000Z","detail":{"to":0.36627,"from":0.26586,"percentile":0.98429},"summary":"EPSS moved from 26.6% to 36.6% probability of exploitation in the next thirty days."}],"references":[{"url":"http://seclists.org/fulldisclosure/2018/Jan/28","tags":["Mailing List","Third Party Advisory"],"source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/43460/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"cve@mitre.org"},{"url":"http://seclists.org/fulldisclosure/2018/Jan/28","tags":["Mailing List","Third Party Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/43460/","tags":["Exploit","Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-16887","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}