TI-2017-10454 CVE-2017-14335 · GHSA-68qc-fv6j-x267On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not…Priority MEDIUM 55On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently sanitized, sending a PUT request to /ISAPI/Security/users/1 allows an admin password change.CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.27834 · Published 2017-09-12 · No fix listed CWE-20