Vulnerability in Compal Broadband Networks Cg6640e Wireless Gateway
CVE-2014-8656
The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH have a default password of (1) admin for the admin account and (2) compalbn for the root account, which makes it easier for remote attackers to obtain access to certain sensitive information via unspecified vectors.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 10.0 (High). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.109 (95.7th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 96th percentile — 95.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.109 · newest: 0.109 · change: 0.000
Affected products
- Compal Broadband Networks Cg6640e Wireless Gateway — versions 1.0
- Compal Broadband Networks Ch664oe Wireless Gateway — versions 1.0
- Compal Broadband Networks Firmware — versions ch6640-3.5.11.7-nosh
Weakness classification (CWE)
References
- www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5203.php (Exploit)
- www.exploit-db.com/exploits/35075 (Exploit, exploit)
- packetstormsecurity.com/files/128860/CBN-CH6640E-CG6640E-Wireless-Gateway-XSS-C… (Exploit)
- osvdb.org/show/osvdb/113836 (vdb-entry)