CVE-2014-3778: CSRF
Multiple cross-site request forgery (CSRF) vulnerabilities in goform/RgDdns in ARRIS (formerly Motorola) SBG901 SURFboard Wireless Cable Modem allow remote attackers to hijack the authentication of administrators for requests that (1) change the dns service via the DdnsService parameter, (2) change the username via the DdnsUserName parameter, (3) change the password via the DdnsPassword parameter, or (4) change the host name via the DdnsHostName parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-3778?
CVE-2014-3778 is classified as a medium severity vulnerability due to the potential for unauthorized actions on an affected system.
How do I fix CVE-2014-3778?
To fix CVE-2014-3778, update the firmware of the ARRIS SBG901 modem to the latest version provided by the manufacturer.
What does CVE-2014-3778 affect?
CVE-2014-3778 affects the ARRIS SBG901 Wireless Cable Modem, specifically its goform/RgDdns functionality.
Can CVE-2014-3778 lead to unauthorized access?
Yes, CVE-2014-3778 can allow remote attackers to hijack administrative authentication, potentially leading to unauthorized access.
Is there a known exploit for CVE-2014-3778?
Yes, there are known exploits for CVE-2014-3778 that demonstrate how the vulnerabilities can be exploited to manipulate the device settings.