PT-2014-8519 · Arris · Arris Vap2500

Headlesszeke + 1 · Published 2014-11-25 · Updated 2014-11-28 · CVE-2014-8425

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions ARRIS VAP2500 versions prior to FW08.41

Description The issue allows remote attackers to obtain credentials by reading the configuration files. This is related to the management portal in the affected device.

Recommendations For ARRIS VAP2500 versions prior to FW08.41, update the firmware to FW08.41 or later to resolve the issue. As a temporary workaround, consider restricting access to the management portal to minimize the risk of exploitation.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2014-8425

ZDI-14-387

Affected Products

Arris Vap2500

References · 4

• 🔥 https://exploit-db.com/exploits/35372 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-8425 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-14-387 · Security Note
• http://zerodayinitiative.com/advisories/ZDI-14-387 · Note