[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fubWqs9w5J2_qUYl7aAHvF51X4FdPt6btaFID-RfSnE0":3,"g5a-risk:CVE-2018-10989":112},{"success":4,"data":5,"meta":110},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":26,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":53,"references":54,"referencesCount":58,"weaknesses":59,"weaknessesCount":58,"isActivelyExploited":68,"cisaInfo":26,"otxData":26,"relatedBlogPosts":69,"seoMetadata":70,"configurations":95,"relatedVendorCves":108,"notableEvents":109},"CVE-2018-10989","What is CVE-2018-10989?","Arris Touchstone Telephony Gateway TG1682G 9.1.103J6 devices are distributed by some ISPs with a default password of \"password\" for the admin account that is used over an unencrypted http:\u002F\u002F192.168.0.1 connection, which might allow remote attackers to bypass intended access restrictions by leveraging access to the local network. NOTE: one or more user's guides distributed by ISPs state \"At a minimum, you should set a login password.\"","Arris Touchstone Telephony Gateway TG1682G 9.1.103J6 devices are distributed by some ISPs with a default password of \"password\" for the admin account that is...","2018-05-14T14:29:00.287","2023-11-07T02:51:35.983",6.6,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":22,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","HIGH","NONE","UNCHANGED","MEDIUM",null,0.7,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":25,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":36,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:M\u002FAu:S\u002FC:P\u002FI:N\u002FA:N","SINGLE","PARTIAL",3.5,"LOW",6.8,2.9,0.01393,[40,40,40,40,40,40,40],"Medium",[44,49],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"commscope","arris_tg1682g_firmware","9.1.103j6","cpe:2.3:o:commscope:arris_tg1682g_firmware:9.1.103j6:*:*:*:*:*:*:*",{"vendor":45,"product":50,"version":51,"criteria":52,"vulnerable":4},"arris_tg1682g","-","cpe:2.3:h:commscope:arris_tg1682g:-:*:*:*:*:*:*:*",2,[55],{"url":56,"source":42,"tags":57},"https:\u002F\u002Fmedium.com\u002F%40AkshaySharmaUS\u002Fcomcast-arris-touchstone-gateway-devices-are-vulnerable-heres-the-disclosure-7d603aa9342c",[],1,[60],{"id":61,"name":62,"description":63,"extendedDescription":64,"status":65,"abstraction":66,"structure":67},"CWE-1188","Initialization of a Resource with an Insecure Default","The product initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.","Developers often choose default values that leave the product as open and easy to use as possible out-of-the-box, under the assumption that the administrator can (or should) change the default value.  However, this ease-of-use comes at a cost when the default is insecure and the administrator does not change it.","Incomplete","Base","Simple",false,[],{"title":71,"metaDescription":72,"keywords":73,"canonicalUrl":74,"structuredData":75},"What is CVE-2018-10989? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-10989, a medium severity cyber security vulnerability from 2018. Arris Touchstone Telephony Gateway TG1682G 9.1.103J6 devi...","CVE-2018-10989, CVE-2018-10989 vulnerability, CVE-2018-10989 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, commscope security, arris_tg1682g_firmware vulnerability, arris_tg1682g vulnerability","\u002Fwhat-is\u002Fcve-2018-10989",{"@context":76,"@type":77,"headline":71,"description":72,"datePublished":10,"dateModified":11,"author":78,"publisher":82,"about":86,"mainEntityOfPage":90,"articleSection":93,"keywords":94},"https:\u002F\u002Fschema.org","TechArticle",{"@type":79,"name":80,"url":81},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":79,"name":80,"url":81,"logo":83},{"@type":84,"url":85},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":87,"name":6,"description":88,"additionalType":89},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":91,"@id":92},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-10989","Cybersecurity","CVE-2018-10989, CVE-2018-10989 vulnerability, CVE-2018-10989 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[96],{"Operator":97,"Negate":26,"Nodes":98},"AND",[99,104],{"Operator":100,"Negate":26,"CPEMatch":101},"OR",[102],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":103,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"B89139C7-E762-4F5F-A6AD-CC67CFC96136",{"Operator":100,"Negate":26,"CPEMatch":105},[106],{"Vulnerable":26,"Criteria":52,"MatchCriteriaID":107,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"5D2AFAD9-07CD-4960-801F-A602CB31BD61",[],[],{"lastModified":11,"cacheTime":111,"version":32},1792386579610,{"score":113,"band":114,"action":115,"scoredAt":116},24,"Low","Monitor","2026-10-16T06:43:59.879125+00:00"]