CVE-2017-14335: Hbgk 7204xr Firmware

High severity, CVSS 7.5. EPSS: 27.8% chance of exploitation in the next 30 days.

On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently sanitized, sending a PUT request to /ISAPI/Security/users/1 allows an admin password change.

Affected products

• Hbgk 7204xr Firmware: affected versions not specified
• Hbgk 7208xr Firmware: affected versions not specified
• Hbgk 7216xr Firmware: affected versions not specified
• Hbgk HB7004K Firmware: affected versions not specified
• Hbgk HB7004KH Firmware: affected versions not specified
• Hbgk HB7008KC Firmware: affected versions not specified
• Hbgk HB7008KCE Firmware: affected versions not specified
• Hbgk HB7008KH Firmware: affected versions not specified
• Hbgk HB7008KHE Firmware: affected versions not specified
• Hbgk HB7008T2 Firmware: affected versions not specified
• Hbgk HB7016LC Firmware: affected versions not specified
• Hbgk HB7016LH Firmware: affected versions not specified
• Hbgk HB7016T2 Firmware: affected versions not specified
• Hbgk HB7024XT Firmware: affected versions not specified
• Hbgk HB7032XT Firmware: affected versions not specified
• Hbgk HB7108X3 Firmware: affected versions not specified
• Hbgk HB7116X3 Firmware: affected versions not specified
• Hbgk HB7204KK Firmware: affected versions not specified
• Hbgk HB7204KL Firmware: affected versions not specified
• Hbgk HB7204X Firmware: affected versions not specified
• Hbgk HB7204XT Firmware: affected versions not specified
• Hbgk HB7208X3 Firmware: affected versions not specified
• Hbgk HB7208X Firmware: affected versions not specified
• Hbgk HB7208XT Firmware: affected versions not specified
• Hbgk HB7216X3 Firmware: affected versions not specified
• and 44 more

Published 2017-09-12. Last modified 2026-06-17.