CVE-2016-9494
Estado: ModificadaMedia (6.5)—
Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, are potentially vulnerable to improper input validation. The device's advanced status web page that is linked to from the basic status web page does not appear to properly parse malformed GET requests. This may lead to a denial of service.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Puntuación base: 6.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.75%
- Percentil entre todas las CVEs puntuadas: 53
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (4)
CWE
- CWE-20
- CWE-20
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2016-9494",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 3.3,
"accessVector": "ADJACENT_NETWORK",
"vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:P",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "LOW",
"obtainAllPrivilege": false,
"exploitabilityScore": 6.5,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 6.5,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "cret@cert.org",
"affectedData": [
{
"vendor": "Hughes Satellite Modem",
"product": "HN7740S",
"versions": [
{
"status": "unknown",
"version": "N/A"
}
]
},
{
"vendor": "Hughes Satellite Modem",
"product": "DW7000",
"versions": [
{
"status": "unknown",
"version": "N/A"
}
]
},
{
"vendor": "Hughes Satellite Modem",
"product": "HN7000S/SM",
"versions": [
{
"status": "unknown",
"version": "N/A"
}
]
}
]
}
],
"published": "2018-07-13T20:29:01.737",
"references": [
{
"url": "https://www.kb.cert.org/vuls/id/614751",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "cret@cert.org"
},
{
"url": "https://www.securityfocus.com/bid/96244",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "cret@cert.org"
},
{
"url": "https://www.kb.cert.org/vuls/id/614751",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.securityfocus.com/bid/96244",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "cret@cert.org",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-20"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Hughes high-performance broadband satellite modems, models HN7740S DW7000 HN7000S/SM, are potentially vulnerable to improper input validation. The device's advanced status web page that is linked to from the basic status web page does not appear to properly parse malformed GET requests. This may lead to a denial of service."
},
{
"lang": "es",
"value": "Los módems por satélite de alto rendimiento de banda ancha de Hughes, en sus modelos HN7740S DW7000 HN7000S/SM, son potencialmente vulnerables a una validación de entradas incorrecta. La página web de estado avanzada del dispositivo que está enlazada desde la página web de estado básica no parece analizar correctamente las peticiones GET mal formadas. Esto podría conducir a una denegación de servicio."
}
],
"lastModified": "2026-06-17T00:56:10.180",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hughes:hn7740s_firmware:6.9.0.34:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E9029731-A889-43E7-BBC0-38E982690D57"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hughes:hn7740s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BF1B8214-EE17-49B6-8084-D9195F989961"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hughes:dw7000_firmware:6.9.0.34:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A98920BD-1929-419A-961A-CA0F09187693"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hughes:dw7000:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "6A154763-BFF7-4541-9036-34B85BA18479"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hughes:hn7000s_firmware:6.9.0.34:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "27F4528C-7D87-4B5A-A330-A09F555AE36D"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hughes:hn7000s:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "91470E55-2227-489A-BEB5-86C151F32344"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:hughes:hn7000sm_firmware:6.9.0.34:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BA234B78-E832-4493-BFCD-AECEAC3CCA02"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:hughes:hn7000sm:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5AAB1D14-3EA2-46C7-9010-87750F19DF24"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cret@cert.org"
}