Vulnerability Details CVE-2011-0885
A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default password of D0nt4g3tme for the mso account, which makes it easier for remote attackers to obtain administrative access via the (1) web interface or (2) TELNET interface.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.209
EPSS Ranking 95.4%
CVSS Severity
CVSS v2 Score 10.0
References
- http://seclists.org/bugtraq/2011/Feb/36
- http://secunia.com/advisories/43199
- http://securityreason.com/securityalert/8066
- http://www.exploit-db.com/exploits/16123/
- http://www.securityfocus.com/archive/1/516205/100/0/threaded
- http://www.securityfocus.com/bid/46215
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65184
- https://www.trustwave.com/spiderlabs/advisories/TWSL2011-002.txt
- http://seclists.org/bugtraq/2011/Feb/36
- http://secunia.com/advisories/43199
- http://securityreason.com/securityalert/8066
- http://www.exploit-db.com/exploits/16123/
- http://www.securityfocus.com/archive/1/516205/100/0/threaded
- http://www.securityfocus.com/bid/46215
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65184
- https://www.trustwave.com/spiderlabs/advisories/TWSL2011-002.txt
Products affected by CVE-2011-0885
-
cpe:2.3:a:smc_networks:smcd3g-ccr_firmware:*
-
cpe:2.3:a:smc_networks:smcd3g-ccr_firmware:1.4.0.42
-
cpe:2.3:h:smc_networks:smcd3g-ccr:*