CVE-2011-0886

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.61%

Published

Feb 8, 2011

Modified

Apr 28, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBComcast DOCSIS 3.0 Business Gateways - Multiple Vulnerabilities TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in the web interface on the SMC SMCD3G-CCR (aka Comcast Business Gateway) with firmware before 1.4.0.49.2 allow remote attackers to (1) hijack the intranet connectivity of arbitrary users for requests that perform a login via goform/login, or hijack the authentication of administrators for requests that (2) enable external logins via an mso_remote_enable action to goform/RemoteRange or (3) change DNS settings via a manual_dns_enable action to goform/Basic.

Weaknesses (CWE)

CWE-352

Affected Products (3)

smc_networks · smcd3g-ccrvulnerable

smc_networks · smcd3g-ccr_firmwarevulnerable

References (16)

http://seclists.org/bugtraq/2011/Feb/36

Exploit

http://secunia.com/advisories/43199

http://securityreason.com/securityalert/8068

http://www.exploit-db.com/exploits/16123/

Exploit