CVE-2021-20120

The CVE-2021-20120 entry concerns the Arris Surfboard SB8200. The vulnerability arises from missing protections against cross-site request forgery (CSRF) in the device’s administration web interface, enabling an attacker to perform configuration changes (including password modifications) without ...