CVE-2015-7291
Published Nov 21, 2015
Last updated 9 years ago
Overview
- Description
- Cross-site request forgery (CSRF) vulnerability in adv_pwd_cgi in the web management interface on Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 allows remote attackers to hijack the authentication of arbitrary users.
- Source
- cret@cert.org
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6.8
- Impact score
- 6.4
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-352
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:arris:na_model_862_gw_mono_firmware:ts070593c_073013:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CE587573-08E6-414D-98DC-9187C365F583"
},
{
"criteria": "cpe:2.3:o:arris:na_model_862_gw_mono_firmware:ts0703128_100611:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B86E7209-225B-465F-8127-21267B78A0D8"
},
{
"criteria": "cpe:2.3:o:arris:na_model_862_gw_mono_firmware:ts0703135_112211:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B1FFC16-7E5C-46B3-88FA-3B572227AC25"
},
{
"criteria": "cpe:2.3:o:arris:na_model_862_gw_mono_firmware:ts0705125_062314:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0E630C0D-DAF6-4CFD-948E-E43CC7FA12D8"
},
{
"criteria": "cpe:2.3:o:arris:na_model_862_gw_mono_firmware:ts0705125d_031115:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF86A127-AC02-42B7-905F-46A3B7D618CC"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:arris:dg860a:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9F752C6F-5269-4330-A1B4-F575EF4ACD70"
},
{
"criteria": "cpe:2.3:h:arris:tg862a:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "214B7318-F67E-4B24-81C7-51863868BE8B"
},
{
"criteria": "cpe:2.3:h:arris:tg862g:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7C41240B-0116-4F89-93BB-553F9A30065F"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]