NVD

Id
7913  
Name
CVE-2011-0886  
Description
Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the SMC SMCD3G-CCR (aka Comcast Business Gateway) with firmware before 1.4.0.49.2 allow remote attackers to (1) hijack the intranet connectivity of arbitrary users for requests that perform a login via goform/login, or hijack the authentication of administrators for requests that (2) enable external logins via an mso_remote_enable action to goform/RemoteRange or (3) change DNS settings via a manual_dns_enable action to goform/Basic.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-02-08  
Modified Date
2011-09-21  
Seq
2011-0886  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
44924 7913 CVE-2011-0886 20110204 TWSL2011-002:Vulnerabilities in Comcast DOCSIS 3.0 Business Gateways (SMCD3G-CCR)  View
44925 7913 CVE-2011-0886 8068  View
44926 7913 CVE-2011-0886 16123  View
44927 7913 CVE-2011-0886 20110205 TWSL2011-002:Vulnerabilities in Comcast DOCSIS 3.0 Business Gateways (SMCD3G-CCR)  View
44928 7913 CVE-2011-0886 46215  View
44929 7913 CVE-2011-0886 smcd3gccr-interface-csrf(65185)  View
44930 7913 CVE-2011-0886 https://www.trustwave.com/spiderlabs/advisories/TWSL2011-002.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34010 JVNDB-2011-004252 SMC SMCD3G-CCR の Web インターフェースにおけるクロスサイトリクエストフォージェリの脆弱性 SMC SMCD3G-CCR の Web インターフェースには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2011-0886 48793 CVE-2011-0886 7913 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004252.html 2011-02-08 2012-03-27 View