Vulnerabilities > Commscope > Arris Surfboard Sb8200 Firmware

DATE CVE VULNERABILITY TITLE RISK
2021-11-09 CVE-2021-20119 Incorrect Authorization vulnerability in Commscope Arris Surfboard Sb8200 Firmware Ab01.02.053.01112320193.0A.Nsh
The password change utility for the Arris SurfBoard SB8200 can have safety measures bypassed that allow any logged-in user to change the administrator password.
high complexity
commscope CWE-863
7.1
7.1
2021-10-21 CVE-2021-20120 Cross-Site Request Forgery (CSRF) vulnerability in Commscope Arris Surfboard Sb8200 Firmware Ab01.02.053.01112320193.0A.Nsh
The administration web interface for the Arris Surfboard SB8200 lacks any protections against cross-site request forgery attacks.
network
low complexity
commscope CWE-352
8.8
8.8