Vulnerability in Arris Dg860a
CVE-2009-5149
Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 have predictable technician passwords, which makes it easier for remote attackers to obtain access via the web management interface, related to a "password of the day" issue.
EPSS: 0.025 (82.9th percentile) — read the EPSS interpretation.
Affected products
- Arris Dg860a
- Arris Na_model_862_gw_mono_firmware — versions ts070593c_073013, ts0703128_100611, ts0703135_112211
- Arris Tg862a
- Arris Tg862g
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (Exploit, x_refsource_MISC)
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)
- cret@cert.org (Exploit, x_refsource_MISC)
- cret@cert.org (Patch, x_refsource_MISC)