ID
VAR-201709-1245
TITLE
Arris Modems Hardcoded Backdoor Vulnerability (CNVD-2017-24358)
Trust: 0.6
sources:
CNVD: CNVD-2017-24358
DESCRIPTION
Arris Modems are modems made by telecommunications equipment maker Arris. They are specially designed for AT & T home users. Arris Modems has a hard-coded backdoor vulnerability. An attacker can obtain the serial number of the device and use the account password "bdctest / bdctest" to access the device on port 61001, thereby obtaining information such as WiFi passwords and device MAC addresses.
Trust: 0.6
sources:
CNVD: CNVD-2017-24358
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
sources:
CNVD: CNVD-2017-24358
AFFECTED PRODUCTS
| vendor: | arris | model: | nvg589 | scope: | - | version: | - | Trust: 0.6 |
| vendor: | arris | model: | nvg599 | scope: | - | version: | - | Trust: 0.6 |
sources:
CNVD: CNVD-2017-24358
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||
|
|
sources:
CNVD: CNVD-2017-24358
PATCH
| title: | Patch for Arris Modems Hardcoded Backdoor Vulnerability (CNVD-2017-24358) | url: | https://www.cnvd.org.cn/patchinfo/show/101380 | Trust: 0.6 |
sources:
CNVD: CNVD-2017-24358
EXTERNAL IDS
| db: | CNVD | id: | CNVD-2017-24358 | Trust: 0.6 |
sources:
CNVD: CNVD-2017-24358
REFERENCES
| url: | https://www.bleepingcomputer.com/news/security/three-hardcoded-backdoor-accounts-discovered-in-arris-modems/ | Trust: 0.6 |
sources:
CNVD: CNVD-2017-24358
SOURCES
| db: | CNVD | id: | CNVD-2017-24358 |
LAST UPDATE DATE
2022-05-04T09:43:36.607000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2017-24358 | date: | 2020-03-10T00:00:00 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2017-24358 | date: | 2017-09-01T00:00:00 |