PT-2014-8994 · Arris · Arris Touchstone Tg862G/Ct Telephony Gateway

Publicado 2014-12-18 · Atualizado 2014-12-18 · CVE-2014-9406

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ARRIS Touchstone TG862G/CT Telephony Gateway versions 7.6.59S.CT and earlier

Description The issue allows remote attackers to obtain access more easily due to a default password for the admin account. This can be exploited via a request to "home loggedout.php".

Recommendations For ARRIS Touchstone TG862G/CT Telephony Gateway versions 7.6.59S.CT and earlier, change the default admin password to a strong, unique password to prevent unauthorized access.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2014-9406

Produtos afetados

Arris Touchstone Tg862G/Ct Telephony Gateway

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-9406 · Nota de Segurança
• http://seclists.org/fulldisclosure/2014/Dec/57 · Nota