GetStationSettings, GetWebsiteFilterSettings and GetNetworkSettings could be accessed unauthenticated via HNAP1/GetMultipleHNAPs
HNAP1/GetMultipleHNAPs could be accessed unauthenticated but to some methods that lead to the information leakage.
I notice that HNAP1/GetMultipleHNAPs maybe designed to allow unauthenticated access. But there is the sensitive information returned by some method. Like the following result, the parent_control_rule should not be obtained in this case.
All of HNAP1/GetMultipleHNAPs access should be authenticated.
{
"GetMultipleHNAPsResponse": {
"GetStationSettingsResponse": {
"wire_sta_list": "00:3e:e1:c4:ff:95,192.168.51.143,tester,2019-06-24 20:06:16,615,0,Apple Inc.",
"wireless_sta_2g_list": "",
"wireless_sta_2g_guest_list": "",
"wireless_sta_5g_list": "",
"wireless_sta_5g_guest_list": "",
"offline_sta_list": "00:e0:4c:6c:27:6b,192.168.51.195,MacBook-Pro,2019-06-06 13:52:18,,0,null;a0:99:9b:0e:b8:b9,192.168.51.215,securisecs-MBP,2017-09-08 18:21:17,,1,Apple Inc.;f0:18:98:39:d1:2a,192.168.51.240,MacBook-Pro,2019-06-24 15:44:02,,2,null;f4:cb:52:95:7f:82,192.168.51.222,192.168.51.222,2019-05-30 20:55:35,,1,HUAWEI TECHNOLOGIES CO. LTD;80:e6:50:0e:09:ea,192.168.51.140,*******s-MacPro,2019-06-03 07:23:15,,2,Apple Inc.;50:64:2b:0f:a7:f2,192.168.51.100,192.168.51.100,2019-06-03 07:58:35,,0,XIAOMI Electronics CO. LT;68:8f:84:05:a1:f5,192.168.51.137,192.168.51.137,2019-06-03 07:58:36,,0,HUAWEI TECHNOLOGIES CO. LTD;00:3e:e1:c3:74:80,192.168.51.168,*******dePro,2019-06-06 19:10:38,,0,Apple Inc.;00:3e:e1:c4:ff:94,192.168.51.142,*******MacPro,2019-06-09 14:39:38,,0,Apple Inc.;b8:63:4d:23:2c:f6,192.168.51.200,*******-Main,2019-06-20 19:36:58,,2,Apple Inc.",
"wireless_maclist_mode": "ojbk",
"wireless_maclist": "123,123123123",
"GetStationSettingsResult": "OK"
},
"GetWebsiteFilterSettingsResponse": {
"parent_control_rule": "1,,a0:99:9b:0e:b8:b9,1,testtest.org,00:00:00,23:59:00,Mon",
"GetWebsiteFilterSettingsResult": "OK"
},
"GetNetworkSettingsResponse": {
"lan(0)_mac": "E4:90:7E:F8:38:F4",
"lan(0)_ipaddr": "192.168.51.1",
"lan(0)_netmask": "255.255.255.0",
"lan(0)_dhcps_enable": "1",
"lan(0)_dhcps_start": "100",
"lan(0)_dhcps_end": "249",
"lan(0)_dhcps_lease": "1440m",
"GetNetworkSettingsResult": "OK"
},
"GetMultipleHNAPsResult": "OK"
}
}