What is CVE-2014-4863?

CVE-2014-4863 is a vulnerability in Arris Touchstone Dg950a, classified under Information Disclosure. Published 2014-09-05.

Is CVE-2014-4863 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Information disclosure in Arris Touchstone Dg950a

CVE-2014-4863

The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote attackers to obtain sensitive password, key, and SSID information via an SNMP request.

Vulnerability class: Information Disclosure

EPSS: 0.157 (96.5th percentile) — read the EPSS interpretation.

Affected products

Arris Touchstone_dg950a
Arris Touchstone_dg950a_software — versions 7.10.131
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

Public proof-of-concept exploits

rapid7/metasploit-framework

References

cret@cert.org (Exploit, x_refsource_MISC)
cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)

Frequently asked questions

What is CVE-2014-4863?: CVE-2014-4863 is a vulnerability in Arris Touchstone Dg950a, classified under Information Disclosure. Published 2014-09-05.
Is CVE-2014-4863 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.