Arris · Arris Touchstone Dg950A · CVE-2014-4863
**Name of the Vulnerable Software and Affected Versions**
Arris Touchstone DG950A cable modem version 7.10.131
**Description**
The issue allows remote attackers to obtain sensitive information, including password, key, and SSID details, by sending an SNMP request. This is possible due to the use of a default SNMP community string set to `public`.
**Recommendations**
For Arris Touchstone DG950A cable modem version 7.10.131, consider changing the default SNMP community string to a secure value to prevent unauthorized access. As a temporary workaround, restrict access to the SNMP service to minimize the risk of exploitation.