RSS   Podatności dla 'Na model 862 gw mono firmware'   RSS

2015-11-21
 
CVE-2015-7291

 

 
Cross-site request forgery (CSRF) vulnerability in adv_pwd_cgi in the web management interface on Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 allows remote attackers to hijack the authentication of arbitrary users.

 
 
CVE-2015-7290

 

 
Cross-site scripting (XSS) vulnerability in adv_pwd_cgi in the web management interface on Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 allows remote attackers to inject arbitrary web script or HTML via the pwd parameter.

 
 
CVE-2015-7289

 

 
Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 have a hardcoded administrator password derived from a serial number, which makes it easier for remote attackers to obtain access via the web management interface, SSH, TELNET, or SNMP.

 
 
CVE-2009-5149

 

 
Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 have predictable technician passwords, which makes it easier for remote attackers to obtain access via the web management interface, related to a "password of the day" issue.

 

 >>> Vendor: Arris 13 Produkty
Cadant c3 cmts
Sbg901
Touchstone dg950a software
Touchstone dg950a
Vap2500 firmware
Touchstone tg862g/ct firmware
Na model 862 gw mono firmware
Tg1682g firmware
Tg2492lg-na firmware
Dg950a firmware
Dg950s firmware
Sbg6580-2 firmware
Tr4400 firmware


Copyright 2021, cxsecurity.com

 

Back to Top