CVE-2017-14147
CriticalSummary
An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which allows an attacker to restore a router to its factory settings by simply browsing to a specific link. Due to improper authentication on this page, the software accepts the request, allowing the attacker to reset the router to its default configurations.
Risk Assessment
An attacker can reset the router to factory settings, enabling access to the router using the default username and password. This poses a significant security risk to the organization's network.
Recommendation
It is recommended to update the router's firmware to the latest version that addresses this vulnerability and to change the default login credentials to stronger ones. Additionally, access to the router's administrative interface should be restricted.
Original NVD description (English source)
An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which could allow an attacker to easily restore a router to its factory settings by simply browsing to the link http://[Default-Router-IP]/restoreinfo.cgi & execute it. Due to improper authentication on this page, the software accepts the request hence allowing attacker to reset the router to its default configurations which later could allow attacker to login to router by using default username/password.