← Vulnerability feed

Vulnerability record · CVE-2014-8656 · published 6 November 2014

CVE-2014-8656: Compal broadband networks firmware vulnerability

CCompal Broadband Networks · Firmware

The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH have a default password of (1) admin for the admin account and (2) compalbn for the root account, which makes it easier for remote attackers to obtain access to certain sensitive information via unspecified vectors.

10.0 CVSS 2.0 High EPSS 11% · top 4.3% CWE-255 · CWE-255
10.0CVSS 2.0 base score
11%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
8References, 6 tagged exploit
17 Jun 2026Last modified by NVD

Description

The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH have a default password of (1) admin for the admin account and (2) compalbn for the root account, which makes it easier for remote attackers to obtain access to certain sensitive information via unspecified vectors.

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/show/osvdb/113836
http://packetstormsecurity.com/files/128860/CBN-CH6640E-CG6640E-Wireless-Gateway-XSS-CSRF-DoS-Disclosure.html Exploit
http://www.exploit-db.com/exploits/35075 Exploit
http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5203.php Exploit
http://osvdb.org/show/osvdb/113836
http://packetstormsecurity.com/files/128860/CBN-CH6640E-CG6640E-Wireless-Gateway-XSS-CSRF-DoS-Disclosure.html Exploit
http://www.exploit-db.com/exploits/35075 Exploit
http://www.zeroscience.mk/en/vulnerabilities/ZSL-2014-5203.php Exploit

Track CVE-2014-8656 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

6.8CVE-2014-8654Compal broadband networks firmware cross-site request forgery vulnerabilityMultiple cross-site request forgery (CSRF) vulnerabilities in Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway hardware 1.0 with …EPSS 2.9%5.0CVE-2014-8655Compal broadband networks firmware permissions and access controls vulnerabilityThe Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to bypass aut…EPSS 7.4%5.0CVE-2014-8657Compal broadband networks firmware vulnerabilityThe Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to cause a de…EPSS 6.8%4.3CVE-2014-8653Compal broadband networks firmware cross-site scripting vulnerabilityCross-site scripting (XSS) vulnerability in Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NO…EPSS 3.5%8.8CVE-2014-1812Microsoft Windows Group Policy Preferences credential exposure and privilege escalationGroup Policy Preferences in multiple Windows versions stored and distributed passwords in a way that did not properly protect them, allowing any auth…KEVEPSS 65%analysed

Source: NIST National Vulnerability Database (record CVE-2014-8656), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.