CVE-2017-7315
CriticalSummary
An issue was discovered on Humax Digital HG100R 2.0.6 devices that allows downloading the backup file without the need for credentials. Additionally, the router credentials are stored in plaintext inside the backup file, known as GatewaySettings.bin.
Risk Assessment
The lack of authentication required to download the backup file and the storage of credentials in plaintext pose a serious security risk, allowing potential attackers access to sensitive information.
Recommendation
It is recommended to update the device firmware to the latest version and implement additional security measures, such as changing default passwords and restricting access to backup files.
Original NVD description (English source)
An issue was discovered on Humax Digital HG100R 2.0.6 devices. To download the backup file it's not necessary to use credentials, and the router credentials are stored in plaintext inside the backup, aka GatewaySettings.bin.