Improper Cookie Flag Handling in Cisco and Arris Networking Devices

CVE-2017-9491

Summary

Certain Cisco and Arris devices have a vulnerability related to improper handling of secure flags for cookies during HTTPS sessions. This flaw may allow remote attackers to intercept session cookies because they are not adequately protected, potentially leading to unauthorized access to the administration application. The affected devices include specific models from Cisco and Arris, where the lack of secure flagging raises significant security concerns in the transmission of sensitive data.

References