CVE-2019-15806
CVE-2019-15806
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
29 Aug 2019Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the administrative interface because they include the current base64 encoded password within http://192.168.1.1/basic_sett.html. Any user connected to the Wi-Fi can exploit this.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →