NVD

Id
7914  
Name
CVE-2011-0887  
Description
The web management portal on the SMC SMCD3G-CCR (aka Comcast Business Gateway) with firmware before 1.4.0.49.2 uses predictable session IDs based on time values, which makes it easier for remote attackers to hijack sessions via a brute-force attack on the userid cookie.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-02-08  
Modified Date
2011-09-21  
Seq
2011-0887  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
44931 7914 CVE-2011-0887 20110204 TWSL2011-002:Vulnerabilities in Comcast DOCSIS 3.0 Business Gateways (SMCD3G-CCR)  View
44932 7914 CVE-2011-0887 8068  View
44933 7914 CVE-2011-0887 16123  View
44934 7914 CVE-2011-0887 20110205 TWSL2011-002:Vulnerabilities in Comcast DOCSIS 3.0 Business Gateways (SMCD3G-CCR)  View
44935 7914 CVE-2011-0887 46215  View
44936 7914 CVE-2011-0887 smcd3gccr-weak-security(65186)  View
44937 7914 CVE-2011-0887 https://www.trustwave.com/spiderlabs/advisories/TWSL2011-002.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34011 JVNDB-2011-004253 SMC SMCD3G-CCR の Web 管理ポータル におけるセッションをハイジャックされる脆弱性 SMC SMCD3G-CCR の Web 管理ポータル は、time 値をベースにした予測可能なセッション ID を使用するため、セッションをハイジャックされる脆弱性が存在します。 CVE-2011-0887 48794 CVE-2011-0887 7914 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004253.html 2011-02-08 2012-03-27 View