NVD

Id
35649  
Name
CVE-2014-8655  
Description
The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to bypass authentication and obtain sensitive information via an (a) admin or a (b) root value in the userData cookie in a request to (1) CmgwWirelessSecurity.xml, (2) DocsisConfigFile.xml, or (3) CmgwBasicSetup.xml in xml/ or (4) basicDDNS.html, (5) basicLanUsers.html, or (6) rootDesc.xml.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2014-11-06  
Modified Date
2014-11-06  
Seq
2014-8655  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
182622 35649 CVE-2014-8655 http://packetstormsecurity.com/files/128860/CBN-CH6640E-CG6640E-Wireless-Gateway-XSS-CSRF-DoS-Disclosure.html  View
182623 35649 CVE-2014-8655 35075  View
182624 35649 CVE-2014-8655 70762  View
182625 35649 CVE-2014-8655 cbn-ch6640ecg6640e-info-disc(98331)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16367 JVNDB-2014-005242 Compal Broadband Networks の CH6640E および CG6640E Wireless Gateway のファームウェアにおける認証を回避される脆弱性 Compal Broadband Networks (CBN) の CH6640E および CG6640E Wireless Gateway のファームウェアには、認証を回避されるおよび重要な情報を取得される脆弱性が存在します。 CVE-2014-8655 75948 CVE-2014-8655 35649 5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005242.html 2014-10-04 2014-11-07 View