PT-2014-8662 · Compal Broadband Networks · Cg6640E+1

Gjoko Krstic · Publicado 2014-11-06 · Atualizado 2014-11-06 · CVE-2014-8656

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway version 1.0 with firmware CH6640-3.5.11.7-NOSH

Description The issue concerns default passwords for the admin and root accounts. The admin account has a default password of admin, and the root account has a default password of compalbn. This makes it easier for remote attackers to obtain access to sensitive information.

Recommendations For Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway version 1.0 with firmware CH6640-3.5.11.7-NOSH, change the default passwords for the admin and root accounts to strong, unique passwords to prevent unauthorized access.

Exploit

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2014-8656

Produtos afetados

Cg6640E

Ch6640E

Referências · 6

• 🔥 http://packetstormsecurity.com/files/128860/CBN-CH6640E-CG6640E-Wireless-Gateway-XSS-CSRF-DoS-Disclosure.html · Exploit
• 🔥 http://exploit-db.com/exploits/35075 · Exploit
• 🔥 http://zeroscience.mk/en/vulnerabilities/ZSL-2014-5203.php · Exploit
• 🔥 https://exploit-db.com/exploits/35075 · Exploit
• http://osvdb.org/show/osvdb/113836 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-8656 · Nota de Segurança