PT-2011-2731 · Smc · Smc Smcd3G-Ccr

Matthew Jakubowski + 1 · Publicado 2011-02-08 · Atualizado 2018-10-09 · CVE-2011-0885

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SMC SMCD3G-CCR versions prior to 1.4.0.49.2

Description The issue allows remote attackers to gain administrative access due to a default password for the mso account. This default password is 'D0nt4g3tme'. Attackers can exploit this via the web interface or TELNET interface.

Recommendations For versions prior to 1.4.0.49.2, update the firmware to version 1.4.0.49.2 or later to change the default password for the mso account. As a temporary workaround, consider changing the default password for the mso account to a strong, unique password until the firmware can be updated.

Exploit

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2011-0885

Produtos afetados

Smc Smcd3G-Ccr

Referências · 10

• 🔥 https://exploit-db.com/exploits/16123 · Exploit
• 🔥 http://exploit-db.com/exploits/16123 · Exploit
• https://trustwave.com/spiderlabs/advisories/TWSL2011-002.txt · Nota
• http://securityfocus.com/bid/46215 · Nota
• http://securityfocus.com/archive/1/516205/100/0/threaded · Nota
• http://securityreason.com/securityalert/8066 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65184 · Nota
• http://seclists.org/bugtraq/2011/Feb/36 · Nota
• http://secunia.com/advisories/43199 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-0885 · Nota de Segurança