CVE-2011-0885

A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default password of D0nt4g3tme for the mso…

published February 8, 2011

CVSS
—
EPSS
10%
Percentile
95.6
In the wild
Unconfirmed
What it is

🚨 If you’re rocking a Comcast Business Gateway with outdated firmware, your admin account is just a password away from being exposed! 🔥 Think of it like a restaurant with an unchained backdoor—anyone can just walk in and take charge of the kitchen without needing a key. This default password is like that open door, inviting trouble! An attacker could waltz in and gain complete administrative access through either the web interface or TELNET, potentially taking control of your network settings, altering configurations, or even creating a backdoor for future access. This could lead to serious disruption or data compromise—definitely not a situation any business wants!

Put simply

Think of it like a restaurant with an unchained backdoor—anyone can just walk in and take charge of the kitchen without needing a key. This default password is like that open door, inviting trouble! The vulnerability arises from the default password 'D0nt4g3tme' on the mso account of the SMC SMCD3G-CCR device. With firmware versions prior to 1.4.0.49.2, this weak configuration allows remote attackers to exploit the admin interface.

What to do

An attacker could waltz in and gain complete administrative access through either the web interface or TELNET, potentially taking control of your network settings, altering configurations, or even creating a backdoor for future access. This could lead to serious disruption or data compromise—definitely not a situation any business wants! Immediate action is necessary! Change the default password to a strong, unique one, and upgrade the firmware to at least version 1.4.0.49.2. Regularly review and update the configurations to ensure no backdoors remain! You’ve got this! Follow these steps to lock down your gateway and keep your network secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.10069 · 95.6th percentile
Published
2011-02-08T21:00Z
EPSS history
Timeline
  • 08 FEB 21:00Z
    A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default password of D0nt4g3tme for the mso…
    cvelistv5