9.3

CVE-2015-7289

Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 have a hardcoded administrator password derived from a serial number, which makes it easier for remote attackers to obtain access via the web management interface, SSH, TELNET, or SNMP.

Data is provided by the National Vulnerability Database (NVD)
Arris ≫ Na Model 862 Gw Mono Firmware Versionts070593c_073013
   Arris ≫ Dg860a
   Arris ≫ Tg862a
   Arris ≫ Tg862g
Arris ≫ Na Model 862 Gw Mono Firmware Versionts0703128_100611
   Arris ≫ Dg860a
   Arris ≫ Tg862a
   Arris ≫ Tg862g
Arris ≫ Na Model 862 Gw Mono Firmware Versionts0703135_112211
   Arris ≫ Dg860a
   Arris ≫ Tg862a
   Arris ≫ Tg862g
Arris ≫ Na Model 862 Gw Mono Firmware Versionts0705125_062314
   Arris ≫ Dg860a
   Arris ≫ Tg862a
   Arris ≫ Tg862g
Arris ≫ Na Model 862 Gw Mono Firmware Versionts0705125d_031115
   Arris ≫ Dg860a
   Arris ≫ Tg862a
   Arris ≫ Tg862g
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.47% 0.616
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
http://www.kb.cert.org/vuls/id/419568
Third Party Advisory
US Government Resource