CVE-2011-0885 A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default password of D0nt4g3tme for the mso account, which makes it easier for remote attack...
HighCVSS 10.0
EPSS 10.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default password of D0nt4g3tme for the mso account, which makes it easier for remote attackers to obtain administrative access via the (1) web interface or (2) TELNET interface.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| smc networks smcd3g-ccr | All versions | No fix listed |
| smc networks smcd3g-ccr firmware | <= 1.4.0.49 | No fix listed |
| smc networks smcd3g-ccr firmware | = 1.4.0.42 | No fix listed |
References
- 20110204 TWSL2011-002:Vulnerabilities in Comcast DOCSIS 3.0 Business Gateways (SMCD3G-CCR) mailing-list
- 43199 third-party-advisory
- 8066 third-party-advisory
- 16123 exploit
- 20110205 TWSL2011-002:Vulnerabilities in Comcast DOCSIS 3.0 Business Gateways (SMCD3G-CCR) mailing-list
- 46215 vdb-entry
- smcd3gccr-default-password(65184) vdb-entry
- www.trustwave.com