CVE-2009-5149
Severity Score
4.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 have predictable technician passwords, which makes it easier for remote attackers to obtain access via the web management interface, related to a "password of the day" issue.
Dispositivos Arris DG860A, TG862A y TG862G con firmware TS0703128_100611 hasta la versión TS0705125D_031115 tienen contraseñas para técnico predecibles, lo que facilita a atacantes remotos obtener acceso a través de la interfaz de gestión web, relacionada con un problema 'password of the day'.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-11-19 CVE Reserved
- 2015-11-21 CVE Published
- 2023-03-30 EPSS Updated
- 2024-08-07 CVE Updated
- 2024-08-07 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-255: Credentials Management Errors
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://www.kb.cert.org/vuls/id/419568 | Third Party Advisory |
|
| URL | Date | SRC |
|---|---|---|
| http://www.borfast.com/projects/arris-password-of-the-day-generator | 2024-08-07 | |
| https://github.com/borfast/arrispwgen | 2024-08-07 |
| URL | Date | SRC |
|---|---|---|
| https://play.google.com/store/apps/details?id=me.harrygonzalez.arrispod | 2015-11-23 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts070593c_073013 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts070593c_073013" | - |
Affected
| in | Arris Search vendor "Arris" | Dg860a Search vendor "Arris" for product "Dg860a" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts070593c_073013 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts070593c_073013" | - |
Affected
| in | Arris Search vendor "Arris" | Tg862a Search vendor "Arris" for product "Tg862a" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts070593c_073013 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts070593c_073013" | - |
Affected
| in | Arris Search vendor "Arris" | Tg862g Search vendor "Arris" for product "Tg862g" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts0703128_100611 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts0703128_100611" | - |
Affected
| in | Arris Search vendor "Arris" | Dg860a Search vendor "Arris" for product "Dg860a" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts0703128_100611 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts0703128_100611" | - |
Affected
| in | Arris Search vendor "Arris" | Tg862a Search vendor "Arris" for product "Tg862a" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts0703128_100611 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts0703128_100611" | - |
Affected
| in | Arris Search vendor "Arris" | Tg862g Search vendor "Arris" for product "Tg862g" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts0703135_112211 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts0703135_112211" | - |
Affected
| in | Arris Search vendor "Arris" | Dg860a Search vendor "Arris" for product "Dg860a" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts0703135_112211 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts0703135_112211" | - |
Affected
| in | Arris Search vendor "Arris" | Tg862a Search vendor "Arris" for product "Tg862a" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts0703135_112211 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts0703135_112211" | - |
Affected
| in | Arris Search vendor "Arris" | Tg862g Search vendor "Arris" for product "Tg862g" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts0705125_062314 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts0705125_062314" | - |
Affected
| in | Arris Search vendor "Arris" | Dg860a Search vendor "Arris" for product "Dg860a" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts0705125_062314 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts0705125_062314" | - |
Affected
| in | Arris Search vendor "Arris" | Tg862a Search vendor "Arris" for product "Tg862a" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts0705125_062314 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts0705125_062314" | - |
Affected
| in | Arris Search vendor "Arris" | Tg862g Search vendor "Arris" for product "Tg862g" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts0705125d_031115 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts0705125d_031115" | - |
Affected
| in | Arris Search vendor "Arris" | Dg860a Search vendor "Arris" for product "Dg860a" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts0705125d_031115 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts0705125d_031115" | - |
Affected
| in | Arris Search vendor "Arris" | Tg862a Search vendor "Arris" for product "Tg862a" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts0705125d_031115 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts0705125d_031115" | - |
Affected
| in | Arris Search vendor "Arris" | Tg862g Search vendor "Arris" for product "Tg862g" | * | - |
Safe
|