PT-2014-8994 · Arris · Arris Touchstone Tg862G/Ct Telephony Gateway

Published 2014-12-18 · Updated 2014-12-18 · CVE-2014-9406

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ARRIS Touchstone TG862G/CT Telephony Gateway versions 7.6.59S.CT and earlier

Description The issue allows remote attackers to obtain access more easily due to a default password for the admin account. This can be exploited via a request to "home loggedout.php".

Recommendations For ARRIS Touchstone TG862G/CT Telephony Gateway versions 7.6.59S.CT and earlier, change the default admin password to a strong, unique password to prevent unauthorized access.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2014-9406

Affected Products

Arris Touchstone Tg862G/Ct Telephony Gateway

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-9406 · Security Note
• http://seclists.org/fulldisclosure/2014/Dec/57 · Note