CVE-2017-13717

CVE-2017-13717 describes a critical vulnerability in Starry Station (Starry Router) devices, specifically models s00111 and its firmware. The router's webserver improperly sets the Access-Control-Allow-Origin header to "*", enabling Cross-Origin Resource Sharing (CORS) attacks. This allows malicious websites to brute-force credentials and retrieve sensitive information, including Wi-Fi credentials stored in cleartext, resulting in a high-impact compromise of confidentiality, integrity, and availability. While rated with a CVSS score of 8.8 (High), there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.