PT-2014-8519 · Arris · Arris Vap2500

Headlesszeke + 1 · Publicado 2014-11-25 · Atualizado 2014-11-28 · CVE-2014-8425

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions ARRIS VAP2500 versions prior to FW08.41

Description The issue allows remote attackers to obtain credentials by reading the configuration files. This is related to the management portal in the affected device.

Recommendations For ARRIS VAP2500 versions prior to FW08.41, update the firmware to FW08.41 or later to resolve the issue. As a temporary workaround, consider restricting access to the management portal to minimize the risk of exploitation.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2014-8425

ZDI-14-387

Produtos afetados

Arris Vap2500

Referências · 4

• 🔥 https://exploit-db.com/exploits/35372 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-8425 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-14-387 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-14-387 · Nota