241 matches found
Default credentials
A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default password of D0nt4g3tme for the mso account, which makes it easier for remote attackers to obtain administrative access via the 1 web interface or 2 TELNET interface...
CVE-2011-0885
The CVE-2011-0885 entry affects Comcast DOCSIS 3.0 Business Gateway (SMCD3G-CCR) prior to firmware 1.4.0.49.2. Trustwave’s TWSL2011-002 describes a default credential flaw: the admin login is “mso” with password “D0nt4g3tme,” enabling remote administrative access via web or TELNET. The advisory a...
CVE-2011-0886
The CVE-2011-0886 entry refers to CSRF flaws in the Comcast DOCSIS 3.0 Business Gateway (SMCD3G-CCR) web interface prior to firmware 1.4.0.49.2. Vulnerabilities include: (1) login CSRF that can hijack intranet connectivity, (2) CSRF allowing remote admin activation via goform/RemoteRange, and (3)...
CVE-2011-0887
The CVE-2011-0887 entry refers to the Comcast DOCSIS 3.0 Business Gateway (SMCD3G-CCR) web management portal. Affected firmware prior to 1.4.0.49.2 uses a predictable session ID (“userid” cookie) derived from epoch time, enabling brute-forcing to hijack active sessions. Trustwave’s SpiderLabs adv...
CVE-2011-0885
A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default password of D0nt4g3tme for the mso account, which makes it easier for remote attackers to obtain administrative access via the 1 web interface or 2 TELNET interface...
CVE-2011-0887: Undefined Security Weakness
The web management portal on the SMC SMCD3G-CCR aka Comcast Business Gateway with firmware before 1.4.0.49.2 uses predictable session IDs based on time values, which makes it easier for remote attackers to hijack sessions via a brute-force attack on the userid cookie...
TWSL2011-002:Vulnerabilities in Comcast DOCSIS 3.0 Business Gateways (SMCD3G-CCR)
Trustwave's SpiderLabs Security Advisory TWSL2011-002: Vulnerabilities in Comcast DOCSIS 3.0 Business Gateways SMCD3G-CCR https://www.trustwave.com/spiderlabs/advisories/TWSL2011-002.txt Published: 2011-02-04 Version: 1.0 Vendor: Comcast http://comcast.com and SMC http://www.smc.com Product:...
CVE-2011-0886: Cross-Site Request Forgery (CSRF)
Multiple cross-site request forgery CSRF vulnerabilities in the web interface on the SMC SMCD3G-CCR aka Comcast Business Gateway with firmware before 1.4.0.49.2 allow remote attackers to 1 hijack the intranet connectivity of arbitrary users for requests that perform a login via goform/login, or...
Comcast / SMC DOCSIS 3.0 Business Gateway - SMCD3G-CCR routers vulnerability
Crossite request forgery, default account...
CVE-2011-0885: Undefined Security Weakness
A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default password of D0nt4g3tme for the mso account, which makes it easier for remote attackers to obtain administrative access via the 1 web interface or 2 TELNET interface...
Comcast DOCSIS 3.0 Business Gateways - Multiple Vulnerabilities
Comcast DOCSIS 3.0 Business Gateways - Multiple Vulnerabilities Trustwave's SpiderLabs Security Advisory TWSL2011-002: Vulnerabilities in Comcast DOCSIS 3.0 Business Gateways D3G-CCR https://www.trustwave.com/spiderlabs/advisories/TWSL2011-002.txt Published: 2011-02-04 Version: 1.0 Vendor: Comcas...
Comcast DOCSIS 3.0 Business Gateways Multiple Vulnerabilities
Exploit for hardware platform in category remote exploits Published: 2011-02-04 Version: 1.0 Vendor: Comcast http://comcast.com and SMC http://www.smc.com Product: Comcast DOCSIS 3.0 Business Gateway - SMCD3G-CCR Version affected: Versions prior to 1.4.0.49.2 Product description: The Comcast DOCS...
Comcast DOCSIS 3.0 Business Gateways - Multiple Vulnerabilities
Trustwave's SpiderLabs Security Advisory TWSL2011-002: Vulnerabilities in Comcast DOCSIS 3.0 Business Gateways D3G-CCR https://www.trustwave.com/spiderlabs/advisories/TWSL2011-002.txt Published: 2011-02-04 Version: 1.0 Vendor: Comcast http://comcast.com Product: Comcast DOCSIS 3.0 Business Gatewa...
Comcast DOCSIS 3.0 Business Gateways XSRF / Session Management
Trustwave's SpiderLabs Security Advisory TWSL2011-001: Vulnerabilities in Comcast DOCSIS 3.0 Business Gateways SMCD3G-CCR https://www.trustwave.com/spiderlabs/advisories/TWSL2011-002.txt Published: 2011-02-04 Version: 1.0 Vendor: Comcast http://comcast.com and SMC http://www.smc.com Product:...
Comcast Defacer Sentenced to 4 Months
A former member of the hacker gang Kryogeniks was sentenced to four months in prison for his role in a 2008 stunt that replaced Comcast’s homepage with a shout-out to other hackers. Read the full article. Wired...
Kryogeniks Indicted for Comcast Hack
Three alleged members of the hacker gang Kryogeniks were hit with a federal conspiracy charge for a 2008 stunt that replaced Comcast’s homepage with a shout-out to other hackers. Prosecutors identified Christopher Allen Lewis, 19, and James Robert Black Jr., 20, as the hackers “EBK” and “Defiant,...
Comcast Alerts Customers to PC Infections
CNet’s Elinor Mills has the scoop on a Comcast trial of a new automated service that will warn broadband customers of possible virus infections, if the computers are behaving as if they have been compromised by malware. For instance, a significant overnight spike in traffic being sent from a...
Comcast passwords left unprotected online
User names and passwords belonging to more than 8,000 Comcast Internet customers were left exposed on the Web for at least two months. A post by Brad Stone on the Bits blog NYTimes.com details the situation, which was exposed by a Comcast customer from Pennsylvania. Kevin Andreyo, an educational...
