CVE-2014-4863
Arris DG950A Cable Modem Wifi Enumeration
Severity Score
5.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote attackers to obtain sensitive password, key, and SSID information via an SNMP request.
El módem de cable Arris Touchstone DG950A con software 7.10.131 tiene una comunidad de público SNMP, lo que permite a atacantes remotos obtener información sensible de contraseñas, claves y SSID a través de una solicitud SNMP.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2014-07-10 CVE Reserved
- 2014-09-05 CVE Published
- 2024-08-06 CVE Updated
- 2024-08-06 First Exploit
- 2024-09-03 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://www.kb.cert.org/vuls/id/855836 | Third Party Advisory |
|
| https://www.rapid7.com/blog/post/2014/08/21/more-snmp-information-leaks-cve-2014-4862-and-cve-2014-4863 |
| URL | Date | SRC |
|---|---|---|
| https://community.rapid7.com/community/metasploit/blog/2014/08/21/more-snmp-information-leaks-cve-2014-4862-and-cve-2014-4863 | 2024-08-06 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Arris Search vendor "Arris" | Touchstone Dg950a Software Search vendor "Arris" for product "Touchstone Dg950a Software" | 7.10.131 Search vendor "Arris" for product "Touchstone Dg950a Software" and version "7.10.131" | - |
Affected
| in | Arris Search vendor "Arris" | Touchstone Dg950a Search vendor "Arris" for product "Touchstone Dg950a" | - | - |
Affected
|