CVE-2011-0885

2011-02-0822:00:00

CWE-255

[email protected]

web.nvd.nist.gov

cve-2011-0885

comcast business gateway

smc smcd3g-ccr

firmware

default password

remote attackers

administrative access

web interface

telnet interface

security vulnerability

nvd

7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.028 Low

EPSS

Percentile

90.6%

JSON

A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default password of D0nt4g3tme for the mso account, which makes it easier for remote attackers to obtain administrative access via the (1) web interface or (2) TELNET interface.

CPENameOperatorVersion
smc_networks:smcd3g-ccrsmc networks smcd3g-ccreq*
smc_networks:smcd3g-ccr_firmwaresmc networks smcd3g-ccr firmwarele1.4.0.49
smc_networks:smcd3g-ccr_firmwaresmc networks smcd3g-ccr firmwareeq1.4.0.42

CPE	Name	Operator	Version
smc_networks:smcd3g-ccr	smc networks smcd3g-ccr	eq	*
smc_networks:smcd3g-ccr_firmware	smc networks smcd3g-ccr firmware	le	1.4.0.49
smc_networks:smcd3g-ccr_firmware	smc networks smcd3g-ccr firmware	eq	1.4.0.42