KLA10704 Multiple vulnerabilities in ARRIS cable modems.

Multiple serious vulnerabilities have been found in ARRIS cable modems. Malicious users can exploit these vulnerabilities to gain privileges or inject arbitrary code. Below is a complete list of vulnerabilities: 1. Predictable technician password can be exploited remotely to gain technician...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in advpwdcgi in the web management interface on Arris DG860A, TG862A, and TG862G devices with firmware TS0703128100611 through TS0705125D031115 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-7291

Cross-site request forgery CSRF vulnerability in advpwdcgi in the web management interface on Arris DG860A, TG862A, and TG862G devices with firmware TS0703128100611 through TS0705125D031115 allows remote attackers to hijack the authentication of arbitrary users...

CVE-2015-7290

The CVE-2015-7290 entry describes a Cross-site Scripting (XSS) vulnerability in the adv_pwd_cgi parameter of the Arris web management interface, affecting DG860A, TG862A, and TG862G devices. The root cause is reflected XSS via the pwd parameter, enabling an attacker to inject arbitrary web script...