CVE-2011-0885

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 10.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2011-02-08 · updated 2026-06-16
Weakness: CWE-255

Description

A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default password of D0nt4g3tme for the mso account, which makes it easier for remote attackers to obtain administrative access via the (1) web interface or (2) TELNET interface.

Affected products

Smc Networks Smcd3G-Ccr: all versions
Smc Networks Smcd3G-Ccr Firmware: through 1.4.0.49; 1.4.0.42

References

http://seclists.org/bugtraq/2011/Feb/36
http://secunia.com/advisories/43199
http://securityreason.com/securityalert/8066
http://www.exploit-db.com/exploits/16123/
http://www.securityfocus.com/archive/1/516205/100/0/threaded
http://www.securityfocus.com/bid/46215
https://exchange.xforce.ibmcloud.com/vulnerabilities/65184
https://www.trustwave.com/spiderlabs/advisories/TWSL2011-002.txt
http://seclists.org/bugtraq/2011/Feb/36
http://secunia.com/advisories/43199
http://securityreason.com/securityalert/8066
http://www.exploit-db.com/exploits/16123/

Get alerted when CVE-2011-0885 or the next vulnerability affects your stack