CVE-2011-0887

The web management portal on the SMC SMCD3G-CCR (aka Comcast Business Gateway) with firmware before 1.4.0.49.2 uses predictable session IDs based on time…

published February 8, 2011

CVSS
—
EPSS
5%
Percentile
91.7
In the wild
Unconfirmed
What it is

The web management portal on the SMC SMCD3G-CCR (aka Comcast Business Gateway) with firmware before 1.4.0.49.2 uses predictable session IDs based on time values, which makes it easier for remote attackers to hijack sessions via a brute-force attack on the userid cookie.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04668 · 91.7th percentile
Published
2011-02-08T21:00Z
EPSS history
Timeline
  • 08 FEB 21:00Z
    The web management portal on the SMC SMCD3G-CCR (aka Comcast Business Gateway) with firmware before 1.4.0.49.2 uses predictable session IDs based on time…
    cvelistv5