Lucene search

[email protected]CVE-2014-8656

HistoryOct 03, 2022 - 4:20 p.m.

CVE-2014-8656

2022-10-0316:20:38

CWE-255

[email protected]

web.nvd.nist.gov

compal

broadband

networks

cbn

ch6640e

cg6640e

wireless

gateway

firmware

vulnerability

default password

remote attackers

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.9%

JSON

The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH have a default password of (1) admin for the admin account and (2) compalbn for the root account, which makes it easier for remote attackers to obtain access to certain sensitive information via unspecified vectors.

Affected configurations

NVD

Node

compal_broadband_networksfirmwareMatchch6640-3.5.11.7-nosh

AND

compal_broadband_networkscg6640e_wireless_gatewayMatch1.0

compal_broadband_networksch664oe_wireless_gatewayMatch1.0

CPENameOperatorVersion
compal_broadband_networks:firmwarecompal broadband networks firmwareeqch6640-3.5.11.7-nosh
compal_broadband_networks:cg6640e_wireless_gatewaycompal broadband networks cg6640e wireless gatewayeq1.0
compal_broadband_networks:ch664oe_wireless_gatewaycompal broadband networks ch664oe wireless gatewayeq1.0

CPE	Name	Operator	Version
compal_broadband_networks:firmware	compal broadband networks firmware	eq	ch6640-3.5.11.7-nosh
compal_broadband_networks:cg6640e_wireless_gateway	compal broadband networks cg6640e wireless gateway	eq	1.0
compal_broadband_networks:ch664oe_wireless_gateway	compal broadband networks ch664oe wireless gateway	eq	1.0

References

osvdb.org/show/osvdb/113836

packetstormsecurity.com/files/128860/CBN-CH6640E-CG6640E-Wireless-Gateway-XSS-CSRF-DoS-Disclosure.html

www.exploit-db.com/exploits/35075

www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5203.php

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.9%

JSON

Related for CVE-2014-8656

prion1 nvd1 cvelist1 zeroscience1