CVE-2014-4862

medium · 5

The Netmaster CBW700N cable modem with software 81.447.392110.729.024 has an SNMP community of public, which allows remote attackers to obtain sensitive credential, key, and SSID information via an SNMP request.

CVSS

17.1%

EPSS (exploit prob.)

97th

EPSS percentile

2014-09-05

Published

AV:N/AC:L/Au:N/C:P/I:N/A:N

Weaknesses

CWE-200

Affected products

Vendor	Product	Affected versions
netmaster	cbw700_software	81.447.392110.729.024
netmaster	netmaster_cbw700n	all versions

Check a specific version with /api/v1/cve/match.

References

http://www.kb.cert.org/vuls/id/259548
https://community.rapid7.com/community/metasploit/blog/2014/08/21/more-snmp-information-leaks-cve-2014-4862-and-cve-2014-4863
http://www.kb.cert.org/vuls/id/259548
https://community.rapid7.com/community/metasploit/blog/2014/08/21/more-snmp-information-leaks-cve-2014-4862-and-cve-2014-4863

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2014-4862