CVE-2014-4863

2014-09-0517:55:06

CWE-200

certcc

web.nvd.nist.gov

arris

touchstone

dg950a

cable modem

snmp

vulnerability

software 7.10.131

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

7.2

Confidence

High

EPSS

0.029

Percentile

91.0%

JSON

The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote attackers to obtain sensitive password, key, and SSID information via an SNMP request.

Affected configurations

Nvd

Node

arristouchstone_dg950a_softwareMatch7.10.131

AND

arristouchstone_dg950aMatch-

VendorProductVersionCPE
arristouchstone_dg950a_software7.10.131cpe:2.3:a:arris:touchstone_dg950a_software:7.10.131:*:*:*:*:*:*:*
arristouchstone_dg950a-cpe:2.3:h:arris:touchstone_dg950a:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
arris	touchstone_dg950a_software	7.10.131	cpe:2.3:a:arris:touchstone_dg950a_software:7.10.131:::::::*
arris	touchstone_dg950a	-	cpe:2.3:h:arris:touchstone_dg950a:-:::::::*