Priority LOW 37
On Arris Touchstone Telephony Gateway TG1682G 9.1.103J6 devices, a logout action does not immediately destroy all state on the device related to the validity of the "credential" cookie, which might make it easier for att…
CVSS 3.1HIGH 8.0· Network · High privileges · No interaction · EPSS 0.01066 · Published 2018-05-14 · No fix listed CWE-613
Priority LOW 32
Arris Touchstone Telephony Gateway TG1682G 9.1.103J6 devices are distributed by some ISPs with a default password of "password" for the admin account that is used over an unencrypted http://192.168.0.1 connection, which…
CVSS 3.1MEDIUM 6.6· Network · High privileges · No interaction · EPSS 0.01384 · Published 2018-05-14 · No fix listed CWE-1188
Priority LOW 31
Arris TG1682G devices with Comcast TG1682_2.0s7_PRODse 10.0.59.SIP.PC20.CT software allow Unauthenticated Stored XSS via the actionHandler/ajax_managed_services.php service parameter.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01989 · Published 2017-11-16 · No fix listed CWE-79
Priority MEDIUM 48
The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); Cisco DPC3939B (firmware version dpc3939b-…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03262 · Published 2017-07-31 · No fix listed
Priority LOW 36
The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); Cisco DPC3939B (firmware version dpc3939b-…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01581 · Published 2017-07-31 · No fix listed CWE-200
Priority LOW 27
The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); Cisco DPC3939B (firmware version dpc3939b-…
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01283 · Published 2017-07-31 · No fix listed CWE-200
Priority LOW 39
The Comcast firmware on Cisco DPC3939B (firmware version dpc3939b-v303r204217-150321a-CMCST) devices allows configuration changes via CSRF.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00607 · Published 2017-07-31 · No fix listed CWE-352
Priority LOW 32
The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST); and Arris TG1682G (eMTA&DOCSIS version 10.…
CVSS 3.1MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.01703 · Published 2017-07-31 · No fix listed CWE-200