CVE-2011-0885 Hardcoded credentials in n/a
Remote attackers can gain administrative access to Comcast Business Gateways using a hardcoded default password for the mso account.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2011-0885?
CVE-2011-0885 is a critical vulnerability in n/a, published on 8 Feb 2011. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default password of D0nt4g3tme for the mso account, which makes it easier for remote attackers to obtain administrative access via the (1) web interface or (2) TELNET interface.
Weakness: CWE-255
Which versions are affected by CVE-2011-0885?
It affects 2 products.
Products include Smc Networks Smcd3g-Ccr, Smc Networks Smcd3g-Ccr Firmware.
How do I fix CVE-2011-0885?
No fix has been published for CVE-2011-0885 yet. Limit exposure of the affected software until one is available.
Is CVE-2011-0885 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2011-0885 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-2q53-66m5-xfx3.