PT-2014-8662 · Compal Broadband Networks · Cg6640E+1

Gjoko Krstic · Published 2014-11-06 · Updated 2014-11-06 · CVE-2014-8656

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway version 1.0 with firmware CH6640-3.5.11.7-NOSH

Description The issue concerns default passwords for the admin and root accounts. The admin account has a default password of admin, and the root account has a default password of compalbn. This makes it easier for remote attackers to obtain access to sensitive information.

Recommendations For Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway version 1.0 with firmware CH6640-3.5.11.7-NOSH, change the default passwords for the admin and root accounts to strong, unique passwords to prevent unauthorized access.

Exploit

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2014-8656

Affected Products

Cg6640E

Ch6640E

References · 6

• 🔥 http://packetstormsecurity.com/files/128860/CBN-CH6640E-CG6640E-Wireless-Gateway-XSS-CSRF-DoS-Disclosure.html · Exploit
• 🔥 http://exploit-db.com/exploits/35075 · Exploit
• 🔥 http://zeroscience.mk/en/vulnerabilities/ZSL-2014-5203.php · Exploit
• 🔥 https://exploit-db.com/exploits/35075 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-8656 · Security Note
• http://osvdb.org/show/osvdb/113836 · Note