CVE-2019-15806

The CVE-2019-15806 entry affects CommScope ARRIS TR4400 devices with firmware A1.00.004-180301, which are vulnerable to an authentication bypass of the administrative interface. The issue arises because the firmware exposes the current base64-encoded password within http://192.168.1.1/basic_sett....

CVE-2019-15805

The CVE-2019-15805 entry concerns CommScope ARRIS TR4400 routers. Affected firmware versions up to A1.00.004-180301 expose the current password encoded in base64 on the login.html page (http://192.168.1.1/login.html), enabling an authentication bypass. Impact is described as high (CVSS3 base scor...