Commscope Tr4400 Firmware vulnerabilities
2 known vulnerabilities affecting commscope/tr4400_firmware.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL2
Vulnerabilities
Page 1 of 1
CVE-2019-15805P2CRITICALCVSS 9.8≤ a1.00.004-1803012019-08-29
CVE-2019-15805 [CRITICAL] CWE-326 CVE-2019-15805: CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentic
CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the administrative interface because they include the current base64 encoded password within http://192.168.1.1/login.html. Any user connected to the Wi-Fi can exploit this.
nvd
CVE-2019-15806P3CRITICALCVSS 9.8≤ a1.00.004-1803012019-08-29
CVE-2019-15806 [CRITICAL] CWE-326 CVE-2019-15806: CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentic
CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the administrative interface because they include the current base64 encoded password within http://192.168.1.1/basic_sett.html. Any user connected to the Wi-Fi can exploit this.
nvd