CVE-2011-0887

MEDIUM 4.3CVE-2011-0887 · Published 08/02/2011 · updated 16/06/2026

In short

CVE-2011-0887 is a MEDIUM (CVSS 4.3) vulnerability affecting smcd3g-ccr firmware (smc networks).
Chance of exploitation in the next 30 days (EPSS): 4.7%, higher than 91.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
smcd3g-ccr firmware smc_networks	`= 1.4.0.42`	No fix yet

Description

The web management portal on the SMC SMCD3G-CCR (aka Comcast Business Gateway) with firmware before 1.4.0.49.2 uses predictable session IDs based on time values, which makes it easier for remote attackers to hijack sessions via a brute-force attack on the userid cookie.

References

seclists.org/bugtraq/2011/Feb/36 · Exploit
secunia.com/advisories/43199
securityreason.com/securityalert/8068
exploit-db.com/exploits/16123 · Exploit
securityfocus.com/archive/1/516205/100/0/threaded
securityfocus.com/bid/46215
exchange.xforce.ibmcloud.com/vulnerabilities/65186
trustwave.com/spiderlabs/advisories/TWSL2011-002.txt · Exploit

More vulnerabilities in smcd3g-ccr firmware

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free