PT-2019-14399 · Commscope · Commscope Arris Tr4400

Published 2019-08-29 · Updated 2020-08-24 · CVE-2019-15806

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301

Description The issue allows for an authentication bypass to the administrative interface. This is possible because the current base64 encoded password is included within the http://192.168.1.1/basic sett.html page. Any user connected to the Wi-Fi can exploit this, potentially gaining unauthorized access to the device's administrative functions.

Recommendations For CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301, consider restricting access to the administrative interface until a patch is available. As a temporary workaround, avoid using the password variable in the affected API endpoint, and restrict access to the http://192.168.1.1/basic sett.html page to minimize the risk of exploitation.

Exploit

Fix

Inadequate Encryption Strength

Weakness Enumeration

CWE-326

Related Identifiers

CVE-2019-15806

Affected Products

Commscope Arris Tr4400

References · 4

• 🔥 https://medium.com/@v.roberthoutenbrink/commscope-vulnerability-authentication-bypass-in-arris-tr4400-firmware-version-a1-00-004-180301-4a90aa8e7570 · Exploit
• https://osv.dev/vulnerability/CVE-2019-15806 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-15806 · Security Note
• https://medium.com/%40v.roberthoutenbrink/commscope-vulnerability-authentication-bypass-in-arris-tr4400-firmware-version-a1-00-004-180301-4a90aa8e7570 · Note