{"id":"CVE-2014-4863","aliases":["EUVD-2014-4782","GHSA-vrq2-jwj7-6vrf"],"status":"published","title":"The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public,...","description":"The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote attackers to obtain sensitive password, key, and SSID information via an SNMP request.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.15705,"percentile":0.9688,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2014-09-05T17:00:00Z","modified":"2026-06-17T00:10:42Z","exploits":[{"source":"metasploit","id":"auxiliary/scanner/snmp/arris_dg950","title":"Arris DG950A Cable Modem Wifi Enumeration","type":"auxiliary","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/snmp/arris_dg950"}],"products":[{"vendor":"arris","product":"touchstone_dg950a"},{"vendor":"arris","product":"touchstone_dg950a_software"}],"references":[{"url":"https://community.rapid7.com/community/metasploit/blog/2014/08/21/more-snmp-information-leaks-cve-2014-4862-and-cve-2014-4863","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"http://www.kb.cert.org/vuls/id/855836","tags":["third-party-advisory","x_refsource_CERT-VN","x_transferred","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-4863"},{"url":"https://github.com/advisories/GHSA-vrq2-jwj7-6vrf"}],"sources":{"cve":[{"id":"CVE-2014-4863","description":"The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote attackers to obtain sensitive password, key, and SSID information via an SNMP request.","status":"published","published":"2014-09-05T17:00:00Z","modified":"2024-08-06T11:27:36.909Z","updated_at":"2026-11-02T14:33:45.604635Z"}],"euvd":[{"id":"EUVD-2014-4782","description":"The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote attackers to obtain sensitive password, key, and SSID information via an SNMP request.","status":"published","published":"2014-09-05T17:00:00Z","modified":"2024-08-06T11:27:36Z","updated_at":"2026-11-03T01:57:04.755556Z"}],"ghsa":[{"id":"GHSA-vrq2-jwj7-6vrf","title":"The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public,...","description":"The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote attackers to obtain sensitive password, key, and SSID information via an SNMP request.","status":"published","published":"2022-05-17T04:37:34Z","modified":"2023-01-28T05:02:11Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:43:44.023555Z"}],"nvd":[{"id":"CVE-2014-4863","description":"The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote attackers to obtain sensitive password, key, and SSID information via an SNMP request.","status":"published","published":"2014-09-05T17:55:06.953Z","modified":"2026-06-17T00:10:42.59Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:02:55.540337Z"}]}}