Unscored CVE-2014-9406 EUVD-2014-9227GHSA-358p-qq7j-5wh2

ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default password of password for the admin account,…

Published Dec 18, 2014 · Updated Sep 17, 2024 · Assigned by mitre

Description

ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default password of password for the admin account, which makes it easier for remote attackers to obtain access via a request to home_loggedout.php.

References

20141216 CVE-2014-5437: Arris TG862G - Cross-site Request Forgery (CSRF) mailing-list