CVE-2009-5149

Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 have predictable technician passwords, which makes it easier for remote attackers to obtain access via the web management interface, related to a "password of the day" issue.

• CWE-255

• http://www.borfast.com/projects/arris-password-of-the-day-generator/Exploit
• http://www.kb.cert.org/vuls/id/419568Third Party Advisory, US Government Resource
• https://github.com/borfast/arrispwgenExploit
• https://play.google.com/store/apps/details?id=me.harrygonzalez.arrispodPatch
• http://www.borfast.com/projects/arris-password-of-the-day-generator/Exploit
• http://www.kb.cert.org/vuls/id/419568Third Party Advisory, US Government Resource
• https://github.com/borfast/arrispwgenExploit
• https://play.google.com/store/apps/details?id=me.harrygonzalez.arrispodPatch

Published

Nov 21, 2015

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-5142Cross-site scripting (XSS) vulnerability in timthumb.php in …
• CVE-2009-5143GE Healthcare Discovery 530C has a password of #bigguy1 for …
• CVE-2009-5144mod-gnutls does not validate client certificates when "GnuTL…
• CVE-2009-5145Cross-site scripting (XSS) vulnerability in ZMI pages that u…
• CVE-2009-5146Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2009-5147DL::dlopen in Ruby 1.8, 1.9.0, 1.9.2, 1.9.3, 2.0.0 before pa…
• CVE-2009-5150Absolute Computrace Agent V80.845 and V80.866 does not have …
• CVE-2009-5151The stub component of Absolute Computrace Agent V70.785 exec…
• CVE-2009-5152Absolute Computrace Agent, as distributed on certain Dell In…
• CVE-2009-5153In Novell NetWare before 6.5 SP8, a stack buffer overflow in…
• CVE-2009-5154An issue was discovered on MOBOTIX S14 MX-V4.2.1.61 devices.…
• CVE-2009-5155In the GNU C Library (aka glibc or libc6) before 2.28, parse…