Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 have a hardcoded administrator password derived from a serial number, which makes it easier for remote attackers to obtain access via the web management interface, SSH, TELNET, or SNMP.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Na_model_862_gw_mono_firmware | Arris | ts070593c_073013 (including) | ts070593c_073013 (including) |
| Na_model_862_gw_mono_firmware | Arris | ts0703128_100611 (including) | ts0703128_100611 (including) |
| Na_model_862_gw_mono_firmware | Arris | ts0703135_112211 (including) | ts0703135_112211 (including) |
| Na_model_862_gw_mono_firmware | Arris | ts0705125_062314 (including) | ts0705125_062314 (including) |
| Na_model_862_gw_mono_firmware | Arris | ts0705125d_031115 (including) | ts0705125d_031115 (including) |