Predictable Technician Password Vulnerability in Arris Networking Devices
CVE-2009-5149
Currently unrated
What is CVE-2009-5149?
Certain Arris devices, including the DG860A, TG862A, and TG862G, are susceptible to a vulnerability that stems from the use of predictable technician passwords. This situation arises from a 'password of the day' mechanism, allowing attackers to easily guess or derive passwords to gain unauthorized access via the web management interface. This issue highlights the importance of strong, unpredictable password policies and proper device configuration to enhance security and protect against potential remote attacks.