CVE-2011-0885

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Comcast DOCSIS 3.0 Business Gateways - Multiple Vulnerabilities2011-02-06 · remote · hardware · Verified

Impact

A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default password of D0nt4g3tme for the mso account, which makes it easier for remote attackers to obtain administrative access via the (1) web interface or (2) TELNET interface.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://seclists.org/bugtraq/2011/Feb/36
• http://secunia.com/advisories/43199
• http://securityreason.com/securityalert/8066
• http://www.exploit-db.com/exploits/16123/
• http://www.securityfocus.com/archive/1/516205/100/0/threaded
• http://www.securityfocus.com/bid/46215
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65184
• https://www.trustwave.com/spiderlabs/advisories/TWSL2011-002.txt
• http://seclists.org/bugtraq/2011/Feb/36
• http://secunia.com/advisories/43199
• http://securityreason.com/securityalert/8066
• http://www.exploit-db.com/exploits/16123/
• http://www.securityfocus.com/archive/1/516205/100/0/threaded
• http://www.securityfocus.com/bid/46215
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65184
• https://www.trustwave.com/spiderlabs/advisories/TWSL2011-002.txt