CVE-2019-15805

Published: Aug 29, 2019Modified: Jun 17, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the administrative interface because they include the current base64 encoded password within http://192.168.1.1/login.html. Any user connected to the Wi-Fi can exploit this.

Affected (1)

Products: Commscope: Tr4400 Firmware

1 product

Tr4400 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Commscope Tr4400 Firmware	Up to a1.00.004-180301

Running on/with	Platform Versions
Commscope Tr4400	All versions

Related CWEs

Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (2)

https://medium.com/%40v.roberthoutenbrink/commscope-vulnerability-authentication-bypass-in-arris-tr4400-firmware-version-a1-00-004-180301-4a90aa8e7570

Source: cve@mitre.org

https://medium.com/%40v.roberthoutenbrink/commscope-vulnerability-authentication-bypass-in-arris-tr4400-firmware-version-a1-00-004-180301-4a90aa8e7570

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.