CVE-2014-8425

The ARRIS VAP2500 management portal (firmware before FW08.41) is exposed to an information-disclosure vulnerability where configuration files can be read remotely, allowing an attacker to obtain credentials. This is documented as CVE-2014-8425 with a CVSS v2 base score of 7.8 (HIGH), indicating n...