Not rated

CVE-2021-20120 The administration web interface for the Arris Surfboard SB8200 lacks any protections against cross-site request forgery…

Description

The administration web interface for the Arris Surfboard SB8200 lacks any protections against cross-site request forgery attacks. This means that an attacker could make configuration changes (such as changing the administrative password) without the consent of the user.

Affected products and versions

Product	Affected versions	Fixed in
Arris SurfBoard SB8200	Versions not published

The 2 CVEs of Arris SurfBoard SB8200 →

CVE-2021-20119 The password change utility for the Arris SurfBoard SB8200 can have safety measures bypassed that allow any logged-in… Not rated

Do you use Arris SurfBoard SB8200?

Track this CVE Watch Arris SurfBoard SB8200 Check my SBOMs

www.cveye.io/en/cve/CVE-2021-20120

Timeline

Published October 21, 2021
Last modified August 3, 2024

References

www.tenable.com www.tenable.com

Track this CVE

CVE-2021-20120 The administration web interface for the Arris Surfboard SB8200 lacks any protections against cross-site request forgery…

Description

Affected products and versions

Other CVEs of Arris SurfBoard SB8200