PT-2018-12819 · Harmonic · Harmonic Nsg 9000

Published 2018-08-05 · Updated 2018-10-17 · CVE-2018-14943

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Harmonic NSG 9000 (affected versions not specified)

Description The issue concerns default passwords for certain accounts on the Harmonic NSG 9000 device. Specifically, the admin account has a default password of nsgadmin, the guest account has a default password of nsgguest, and the config account has a default password of nsgconfig.

Recommendations For the Harmonic NSG 9000, change the default passwords for the admin, guest, and config accounts to unique and secure passwords as soon as possible to prevent unauthorized access.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2018-14943

Affected Products

Harmonic Nsg 9000

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2018-14943 · Security Note
• https://github.com/pudding2/NSG9000/blob/master/exp.txt · Note