PT-2015-7507

CVE-2015-7289

·

Published

2015-11-21

·

Updated

2015-11-23

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Arris DG860A versions TS0703128 100611 through TS0705125D 031115 Arris TG862A versions TS0703128 100611 through TS0705125D 031115 Arris TG862G versions TS0703128 100611 through TS0705125D 031115
Description The issue concerns a hardcoded administrator password that can be derived from the device's serial number, making it easier for remote attackers to gain access. This access can be obtained through various interfaces, including the web management interface, SSH, TELNET, or SNMP.
Recommendations For Arris DG860A versions TS0703128 100611 through TS0705125D 031115, consider changing the administrator password to a strong, unique password as soon as possible. For Arris TG862A versions TS0703128 100611 through TS0705125D 031115, consider changing the administrator password to a strong, unique password as soon as possible. For Arris TG862G versions TS0703128 100611 through TS0705125D 031115, consider changing the administrator password to a strong, unique password as soon as possible.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾