What’s Vulnerable › Vulnerabilities

CVE-2014-4863

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 15.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-09-05 · updated 2026-06-17
• Weakness: CWE-200

Description

The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote attackers to obtain sensitive password, key, and SSID information via an SNMP request.

Affected products

• Arris Touchstone Dg950A: all versions
• Arris Touchstone Dg950A Software: 7.10.131

References

• http://www.kb.cert.org/vuls/id/855836
• https://community.rapid7.com/community/metasploit/blog/2014/08/21/more-snmp-information-leaks-cve-2014-4862-and-cve-2014-4863
• http://www.kb.cert.org/vuls/id/855836
• https://community.rapid7.com/community/metasploit/blog/2014/08/21/more-snmp-information-leaks-cve-2014-4862-and-cve-2014-4863

Get alerted when CVE-2014-4863 or the next vulnerability affects your stack