CVE-2014-4863
Published Sep 5, 2014
Last updated 10 years ago
Overview
- Description
- The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote attackers to obtain sensitive password, key, and SSID information via an SNMP request.
- Source
- cret@cert.org
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- CWE-200
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:arris:touchstone_dg950a_software:7.10.131:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8061809A-7A66-42F3-9F97-E88CD1899503"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:arris:touchstone_dg950a:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "87D432A2-CC59-424B-A036-41D425379254"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]