Vulnerability record · CVE-2011-0885 · published 8 February 2011

CVE-2011-0885: Smc networks smcd3g-ccr vulnerability

SSmc Networks · Smcd3g Ccr

A certain Comcast Business Gateway configuration of the SMC SMCD3G-CCR with firmware before 1.4.0.49.2 has a default password of D0nt4g3tme for the mso account, which makes it easier for remote attackers to obtain administrative access via the (1) web interface or (2) TELNET interface.

10.0 CVSS 2.0 High EPSS 10% · top 4.5% CWE-255 · CWE-255

10.0CVSS 2.0 base score

10%EPSS exploitation probability, 30 days

NoNot in CISA KEV

2Affected product versions listed by NVD

16References, 2 tagged exploit

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

SSmcd3g Ccr Smc Networks SSmcd3g Ccr Firmware Smc Networks

References

Link	Tags
http://seclists.org/bugtraq/2011/Feb/36
http://secunia.com/advisories/43199
http://securityreason.com/securityalert/8066
http://www.exploit-db.com/exploits/16123/	Exploit
http://www.securityfocus.com/archive/1/516205/100/0/threaded
http://www.securityfocus.com/bid/46215
https://exchange.xforce.ibmcloud.com/vulnerabilities/65184
https://www.trustwave.com/spiderlabs/advisories/TWSL2011-002.txt
http://seclists.org/bugtraq/2011/Feb/36
http://secunia.com/advisories/43199
http://securityreason.com/securityalert/8066
http://www.exploit-db.com/exploits/16123/	Exploit
http://www.securityfocus.com/archive/1/516205/100/0/threaded
http://www.securityfocus.com/bid/46215
https://exchange.xforce.ibmcloud.com/vulnerabilities/65184
https://www.trustwave.com/spiderlabs/advisories/TWSL2011-002.txt

Track CVE-2011-0885 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

6.8CVE-2011-0886Smc networks smcd3g-ccr cross-site request forgery vulnerabilityMultiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the SMC SMCD3G-CCR (aka Comcast Business Gateway) with firmware be…EPSS 2.6%8 Feb 2011 4.3CVE-2011-0887Smc networks smcd3g-ccr vulnerabilityThe web management portal on the SMC SMCD3G-CCR (aka Comcast Business Gateway) with firmware before 1.4.0.49.2 uses predictable session IDs based on …EPSS 4.7%8 Feb 2011 8.8CVE-2014-1812Microsoft Windows Group Policy Preferences credential exposure and privilege escalationGroup Policy Preferences in multiple Windows versions stored and distributed passwords in a way that did not properly protect them, allowing any auth…KEVEPSS 65%analysed14 May 2014

Source: NIST National Vulnerability Database (record CVE-2011-0885), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.