1. Home
  2. CVE Database
  3. CVE-2014-9406
HIGH · 10.0

CVE-2014-9406

ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default password of password for the admin account, which makes it easier for remote attackers to obtain access ...

Vulnerability Description

ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default password of password for the admin account, which makes it easier for remote attackers to obtain access via a request to home_loggedout.php.

CVSS Score

10.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
ArrisTouchstone Tg862G\/Ct Firmware7.6.59s.ct
ArrisTouchstone Tg862G\/Ct-

Related Weaknesses (CWE)

CWE-255

References

FAQ

What is CVE-2014-9406?

CVE-2014-9406 is a vulnerability with a CVSS score of 10.0 (HIGH). ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default password of password for the admin account, which makes it easier for remote attackers to obtain access ...

How severe is CVE-2014-9406?

CVE-2014-9406 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-9406?

Check the references section above for vendor advisories and patch information. Affected products include: Arris Touchstone Tg862G\/Ct Firmware, Arris Touchstone Tg862G\/Ct.