Vulnerability Details CVE-2021-20119
The password change utility for the Arris SurfBoard SB8200 can have safety measures bypassed that allow any logged-in user to change the administrator password.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 27.5%
CVSS Severity
CVSS v3 Score 7.1
CVSS v2 Score 4.9
References
Products affected by CVE-2021-20119
-
cpe:2.3:h:commscope:arris_surfboard_sb8200:-
-
cpe:2.3:o:commscope:arris_surfboard_sb8200_firmware:ab01.02.053.01_112320_193.0a.nsh