Skip to content
OpenAdvisories
Unscored CVE-2015-7290 EUVD-2015-7221GHSA-x799-m636-fcmx

Cross-site scripting (XSS) vulnerability in adv_pwd_cgi in the web management interface on Arris DG860A, TG862A, and TG862G devices with fi…

Published Nov 21, 2015 · Updated Aug 6, 2024 · Assigned by certcc

Description

Cross-site scripting (XSS) vulnerability in adv_pwd_cgi in the web management interface on Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 allows remote attackers to inject arbitrary web script or HTML via the pwd parameter.

References