TI-2017-09992 CVE-2017-13717 · GHSA-q536-5rhj-7g9h
Starry Station (aka Starry Router) sets the Access-Control-Allow-Origin header to "*".
Priority MEDIUM 43
Starry Station (aka Starry Router) sets the Access-Control-Allow-Origin header to "*".
Vulnerabilities
2 records
TI-2017-09993 CVE-2017-13718 · GHSA-cpcg-x4f2-x9fr
The HTTP API supported by Starry Station (aka Starry Router) allows brute forcing the PIN…
Priority LOW 39
The HTTP API supported by Starry Station (aka Starry Router) allows brute forcing the PIN setup by the user on the device, and this allows an attacker to change the Wi-Fi settings and PIN, as well as port forward and exp…