Unscored CVE-2021-20119 EUVD-2021-7576GHSA-8jrg-5v7m-fc9w

The password change utility for the Arris SurfBoard SB8200 can have safety measures bypassed that allow any logged-in user to change the ad…

Published Nov 9, 2021 · Updated Aug 3, 2024 · Assigned by tenable

Description

The password change utility for the Arris SurfBoard SB8200 can have safety measures bypassed that allow any logged-in user to change the administrator password.

Affected products

Vendor	Product	Affected	Fixed
—	Arris SurfBoard SB8200	Arris SurfBoard SB8200 AB01.02.053.01_112320_193.0A.NSH	—

References

https://www.tenable.com/security/research/tra-2021-49