Cross-Site Request Forgery Vulnerability in Arris DG860A, TG862A, and TG862G
CVE-2015-7291

Currently unrated

Key Information:

Vendor

Arris

Status
Na Model 862 Gw Mono Firmware
Vendor
CVE Published:
21 November 2015

What is CVE-2015-7291?

A cross-site request forgery (CSRF) vulnerability exists in the web management interface of Arris DG860A, TG862A, and TG862G devices. This flaw enables remote attackers to exploit users' authentication, potentially hijacking their sessions without their consent. This vulnerability affects devices running firmware versions TS0703128_100611 through TS0705125D_031115, creating significant risks for affected users who may unknowingly trigger unauthorized actions through malicious requests.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://www.kb.cert.org/vuls/id/419568
third-party-advisoryx_refsource_CERT-VN

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.