CVEvulnerability
CVE-2015-2904
8.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-08-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 8.3 HIGH — AV:A/AC:L/Au:N/C:C/I:C/A:C
Description
Actiontec GT784WN modems with firmware before NCS01-1.0.13 have hardcoded credentials, which makes it easier for remote attackers to obtain root access by connecting to the web administration interface.
Affected configurations
• actiontec ncs01 firmware (<= 1.0.12)
References
- http://www.kb.cert.org/vuls/id/335192 Third Party Advisory, US Government Resource
- http://www.kb.cert.org/vuls/id/335192 Third Party Advisory, US Government Resource