CVE-2015-7289: Critical severity arris na model 862 gw mono firmware vulnerability
Arris DG860A, TG862A, and TG862G devices with firmware TS0703128100611 through TS0705125D031115 have a hardcoded administrator password derived from a serial number, which makes it easier for remote attackers to obtain access via the web management interface, SSH, TELNET, or SNMP.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7289?
CVE-2015-7289 has a medium severity rating due to the potential for unauthorized remote access.
How do I fix CVE-2015-7289?
To fix CVE-2015-7289, update the firmware of the Arris devices to a version that does not use a hardcoded administrator password.
Which devices are affected by CVE-2015-7289?
CVE-2015-7289 affects Arris DG860A, TG862A, and TG862G devices with specific firmware versions.
What type of access can attackers obtain due to CVE-2015-7289?
Attackers can gain unauthorized access via the web management interface, SSH, TELNET, or SNMP due to CVE-2015-7289.
Is there a known workaround for CVE-2015-7289?
There is no effective workaround for CVE-2015-7289; updating the firmware is the only recommended solution.