Unscored severity · published Sep 5, 2014
CVE-2014-4863
The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote attackers to obtain sensitive password, key, and SSID…
–
CVSS
15.7%
EPSS
No
On KEV
Description
The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote attackers to obtain sensitive password, key, and SSID information via an SNMP request.
Exploitation
Is it being used?
Exploit prediction (EPSS)15.7% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TD
Touchstone Dg950a · Arris
All versions, or not specified · source: NVD
TD
Touchstone Dg950a Software · Arris
7.10.131 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-4863
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-4863
US Government Resource
http://www.kb.cert.org/vuls/id/855836
Exploit
https://community.rapid7.com/community/metasploit/blog/2014/08/21/more-snmp-information-leaks-cve-2014-4862-and-cve-2014-4863