TI-2017-09992 CVE-2017-13717 · GHSA-q536-5rhj-7g9h
Starry Station (aka Starry Router) sets the Access-Control-Allow-Origin header to "*".
Priority MEDIUM 43
Starry Station (aka Starry Router) sets the Access-Control-Allow-Origin header to "*".
Starry
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Starry records in CISA KEVNo Starry vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records in S00111 Firmware · all components
TI-2017-09993 CVE-2017-13718 · GHSA-cpcg-x4f2-x9fr
The HTTP API supported by Starry Station (aka Starry Router) allows brute forcing the PIN…
Priority LOW 39
The HTTP API supported by Starry Station (aka Starry Router) allows brute forcing the PIN setup by the user on the device, and this allows an attacker to change the Wi-Fi settings and PIN, as well as port forward and exp…