CVE-2015-7291: CSRF
Cross-site request forgery (CSRF) vulnerability in advpwdcgi in the web management interface on Arris DG860A, TG862A, and TG862G devices with firmware TS0703128100611 through TS0705125D031115 allows remote attackers to hijack the authentication of arbitrary users.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7291?
CVE-2015-7291 is classified as a medium severity vulnerability due to its ability to allow remote attackers to hijack user authentication.
How do I fix CVE-2015-7291?
To mitigate CVE-2015-7291, update the firmware of your Arris DG860A, TG862A, or TG862G devices to a version that is not affected by this vulnerability.
Which devices are affected by CVE-2015-7291?
CVE-2015-7291 affects Arris DG860A, TG862A, and TG862G devices running specific firmware versions including TS0703128_100611 through TS0705125D_031115.
What type of vulnerability is CVE-2015-7291?
CVE-2015-7291 is a cross-site request forgery (CSRF) vulnerability found in the web management interface.
Can CVE-2015-7291 lead to data breaches?
Yes, CVE-2015-7291 can potentially lead to unauthorized access and data breaches by hijacking user sessions.