Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.8
CVSSv2

CVE-2014-5437

Published: 17/12/2014 Updated: 18/12/2014
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple cross-site request forgery (CSRF) vulnerabilities in ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and previous versions allow remote malicious users to hijack the authentication of administrators for requests that (1) enable remote management via a request to remote_management.php, (2) add a port forwarding rule via a request to port_forwarding_add.php, (3) change the wireless network to open via a request to wireless_network_configuration_edit.php, or (4) conduct cross-site scripting (XSS) attacks via the keyword parameter to managed_sites_add_keyword.php.

Vulnerable Product Search on Vulmon Subscribe to Product

arris touchstone_tg862g\\/ct_firmware

Exploits

Exploit DB: Arris Touchstone TG862G/CT Cross Site Request Forgery
Arris Touchstone TG862G/CT suffers from a cross site request forgery vulnerability ...

References

CWE-352http://seclists.org/fulldisclosure/2014/Dec/58http://seclists.org/fulldisclosure/2014/Dec/57https://nvd.nist.govhttps://packetstormsecurity.com/files/129600/Arris-Touchstone-TG862G-CT-Cross-Site-Request-Forgery.html
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-49223CVE-2024-0044information disclosureCVE-2024-35753HTML injectionCVE-2024-21306CVE-2024-35733SQL injectionCVE-2024-35732
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook