CVE-2014-4862

The Netmaster CBW700N cable modem with software 81.447.392110.729.024 has an SNMP community of public, which allows remote attackers to obtain sensitive credential, key, and SSID information via an SNMP request.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.kb.cert.org/vuls/id/259548	US Government Resource
https://community.rapid7.com/community/metasploit/blog/2014/08/21/more-snmp-information-leaks-cve-2014-4862-and-cve-2014-4863
http://www.kb.cert.org/vuls/id/259548	US Government Resource
https://community.rapid7.com/community/metasploit/blog/2014/08/21/more-snmp-information-leaks-cve-2014-4862-and-cve-2014-4863

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:netmaster:cbw700_software:81.447.392110.729.024:*:*:*:*:*:*:*

cpe:2.3:h:netmaster:netmaster_cbw700n:-:*:*:*:*:*:*:*

History

21 Nov 2024, 02:11

Type	Values Removed	Values Added
References	~~() http://www.kb.cert.org/vuls/id/259548 - US Government Resource~~	() http://www.kb.cert.org/vuls/id/259548 - US Government Resource
References	~~() https://community.rapid7.com/community/metasploit/blog/2014/08/21/more-snmp-information-leaks-cve-2014-4862-and-cve-2014-4863 -~~	() https://community.rapid7.com/community/metasploit/blog/2014/08/21/more-snmp-information-leaks-cve-2014-4862-and-cve-2014-4863 -

Information

Published : 2014-09-05 17:55

Updated : 2025-04-12 10:46

NVD link : CVE-2014-4862

Mitre link : CVE-2014-4862

CVE.ORG link : CVE-2014-4862

JSON object : View

Products Affected

netmaster

netmaster_cbw700n
cbw700_software

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2014-4862", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-09-05T17:55:06.907", "references": [{"url": "http://www.kb.cert.org/vuls/id/259548", "tags": ["US Government Resource"], "source": "cret@cert.org"}, {"url": "https://community.rapid7.com/community/metasploit/blog/2014/08/21/more-snmp-information-leaks-cve-2014-4862-and-cve-2014-4863", "source": "cret@cert.org"}, {"url": "http://www.kb.cert.org/vuls/id/259548", "tags": ["US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://community.rapid7.com/community/metasploit/blog/2014/08/21/more-snmp-information-leaks-cve-2014-4862-and-cve-2014-4863", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "The Netmaster CBW700N cable modem with software 81.447.392110.729.024 has an SNMP community of public, which allows remote attackers to obtain sensitive credential, key, and SSID information via an SNMP request."}, {"lang": "es", "value": "El m\u00f3dem de cable Netmaster CBW700N con software 81.447.392110.729.024 tiene una comunidad de p\u00fablico SNMP, lo que permite a atacantes remotos obtener informaci\u00f3n sensible de credenciales, claves y SSID a trav\u00e9s de una solicitud SNMP."}], "lastModified": "2025-04-12T10:46:40.837", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:netmaster:cbw700_software:81.447.392110.729.024:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "376653D0-FF69-407E-9CA0-51276D32BECC"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:netmaster:netmaster_cbw700n:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3599E30C-2558-4476-897F-31ECE12A4BFF"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cret@cert.org"}