CVE-2021-20119

The password change utility for the Arris SurfBoard SB8200 can have safety measures bypassed that allow any logged-in user to change the administrator password.

Score

CVSS 3.1 7.1 High

Status

Modified - vulnreport@tenable.com

Published

2021-11-09

Last modified

2024-08-03

Weaknesses

CWE-863

Affected products

• Arris Surfboard Sb8200 Firmware (Commscope)

References

• https://www.tenable.com/security/research/tra-2021-49