CVE-2014-9406

ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default password of password for the admin account, which makes it…

published December 18, 2014

CVSS
—
EPSS
2%
Percentile
81.4
In the wild
Unconfirmed
What it is

🚨 A default password of 'password'? That's like leaving your front door wide open with a sign that says 'Welcome burglars!' 🔥 Think of it this way: it's like having a hotel room key that works for everyone — anyone can waltz in if they just ask for a room number. With this default admin password, attackers can easily gain access to your gateway settings. If an attacker gets in, they could change the configuration, redirect your traffic, or even launch further attacks from your network. The consequences could range from data exposure to complete control over your telephony gateway, which can be absolutely devastating.

Put simply

Think of it this way: it's like having a hotel room key that works for everyone — anyone can waltz in if they just ask for a room number. With this default admin password, attackers can easily gain access to your gateway settings. This vulnerability allows unauthorized access to the ARRIS Touchstone TG862G/CT Telephony Gateway due to a default admin password that hasn't been changed, allowing attackers to send requests to home_loggedout.php without any authentication.

What to do

If an attacker gets in, they could change the configuration, redirect your traffic, or even launch further attacks from your network. The consequences could range from data exposure to complete control over your telephony gateway, which can be absolutely devastating. To protect yourself, immediately change the default password from 'password' to something strong and unique. Regularly audit your devices for default settings and ensure firmware is updated to the latest version to mitigate risks. You've got this! With just a few quick changes, you can lock down your gateway and keep your network safe. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02096 · 81.4th percentile
Published
2014-12-18T15:00Z
EPSS history
Timeline
  • 18 DEC 15:00Z
    ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default password of password for the admin account, which makes it…
    cvelistv5