Smcd3g-ccr@* Security Vulnerabilities and Issues — Smcd3g-ccr@* CVE List

Lucene search

Smc NetworksSmcd3g-ccr*

3 matches found

CVE•added 2011/02/08 10:0 p.m.•38 views

CVE-2011-0887

The web management portal on the SMC SMCD3G-CCR (aka Comcast Business Gateway) with firmware before 1.4.0.49.2 uses predictable session IDs based on time values, which makes it easier for remote attackers to hijack sessions via a brute-force attack on the userid cookie.

4.3CVSS6.7AI score0.10896EPSS

CVE•added 2011/02/08 10:0 p.m.•37 views

CVE-2011-0885

A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default password of D0nt4g3tme for the mso account, which makes it easier for remote attackers to obtain administrative access via the (1) web interface or (2) TELNET interface.

10CVSS6.9AI score0.20931EPSS

CVE•added 2011/02/08 10:0 p.m.•31 views

CVE-2011-0886

Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the SMC SMCD3G-CCR (aka Comcast Business Gateway) with firmware before 1.4.0.49.2 allow remote attackers to (1) hijack the intranet connectivity of arbitrary users for requests that perform a login via goform/login, ...

6.8CVSS7.4AI score0.04554EPSS