Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

SMC SMCD3G-CCR gateway firmware <1.4.0.49.2 allows default admin password

CVE-2011-0885 · published 15 years ago
Summary

The SMC SMCD3G-CCR business gateway, when running firmware older than version 1.4.0.49.2, comes with a preset password (D0nt4g3tme) for its administrative account. This makes it possible for someone outside your network to log in through the web or TELNET interfaces and take control of the device. Update the gateway to the latest firmware or change the default password immediately to block unauthorized access.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
smc_networks smcd3g-ccr All versions
cpe:2.3:h:smc_networks:smcd3g-ccr:*:*:*:*:*:*:*:*
smc_networks smcd3g-ccr_firmware <= 1.4.0.49
1.4.0.42
cpe:2.3:a:smc_networks:smcd3g-ccr_firmware:*:*:*:*:*:*:*:*
Original advisory text
A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default password of D0nt4g3tme for the mso account, which makes it easier for remote att...
A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default password of D0nt4g3tme for the mso account, which makes it easier for remote attackers to obtain administrative access via the (1) web interface or (2) TELNET interface.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Exploitation
10% chance of attack within 30 days
Type
CWE-255Credentials Management Errors
Timeline
Published8 Feb 2011
Updated15 Oct 2026
First seen29 Sep 2026
Sources
CVE-2011-0885 · NVD
Track software like this
Free during beta