CVE-2015-2904 — HIGH (8.3) — White Hats Nepal

Q: How severe is CVE-2015-2904?

CVE-2015-2904 has been rated HIGH with a CVSS base score of 8.3/10. Review the CVSS metrics above for detailed severity breakdown.

Q: Is there a patch for CVE-2015-2904?

Check the references section above for vendor advisories and patch information. Affected products include: Actiontec Ncs01 Firmware, Actiontec Gt784Wn Wireless N Dsl Modem.

Vulnerability Description

Actiontec GT784WN modems with firmware before NCS01-1.0.13 have hardcoded credentials, which makes it easier for remote attackers to obtain root access by connecting to the web administration interface.

CVSS Score

8.3

HIGH

AV:A/AC:L/Au:N/C:C/I:C/A:C

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Actiontec	Ncs01 Firmware	<= 1.0.12
Actiontec	Gt784Wn Wireless N Dsl Modem	-

References

http://www.kb.cert.org/vuls/id/335192Third Party AdvisoryUS Government Resource
http://www.kb.cert.org/vuls/id/335192Third Party AdvisoryUS Government Resource

FAQ

What is CVE-2015-2904?

CVE-2015-2904 is a vulnerability with a CVSS score of 8.3 (HIGH). Actiontec GT784WN modems with firmware before NCS01-1.0.13 have hardcoded credentials, which makes it easier for remote attackers to obtain root access by connecting to the web administration interfac...

How severe is CVE-2015-2904?

CVE-2015-2904 has been rated HIGH with a CVSS base score of 8.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-2904?

Check the references section above for vendor advisories and patch information. Affected products include: Actiontec Ncs01 Firmware, Actiontec Gt784Wn Wireless N Dsl Modem.