CVE-2021-20119

The password change utility for the Arris SurfBoard SB8200 can have safety measures bypassed that allow any logged-in user to change the administrator password...

CVE-2021-20119

The password change utility for the Arris SurfBoard SB8200 can have safety measures bypassed that allow any logged-in user to change the administrator password...

CVE-2021-20119

The CVE-2021-20119 vulnerability affects the Arris SurfBoard SB8200 (Docsis 3.1 modem). The password change utility lets an authenticated user bypass safety checks and change the administrator password, due to an access‑control issue in the password-change feature. Impact aligns with administrato...