CVE-2023-27572

CVE-2023-27572 concerns the CommScope Arris DG3450 Cable Gateway (AR01.02.056.18_041520_711.NCS.10). A reflected XSS vulnerability exists in the https_redirect.php page exposed via the page parameter. Affected component is the web page handling user input; under the provided data the CVSS base me...

CVE-2023-27571

CVE-2023-27571 affects Arris DG3450 Cable Gateway AR01.02.056.18_041520_711.NCS.10. The vulnerability is due to the troubleshooting_logs_download.php log file download function not checking the session cookie, enabling an attacker to download all log files. Documents confirm affected software/ver...