Skip to content
OpenAdvisories
Unscored CVE-2015-7291 EUVD-2015-7222GHSA-v8j5-55pr-8g8g

Cross-site request forgery (CSRF) vulnerability in adv_pwd_cgi in the web management interface on Arris DG860A, TG862A, and TG862G devices …

Published Nov 21, 2015 · Updated Aug 6, 2024 · Assigned by certcc

Description

Cross-site request forgery (CSRF) vulnerability in adv_pwd_cgi in the web management interface on Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 allows remote attackers to hijack the authentication of arbitrary users.

References