CVE-2015-7290
Severity Score
4.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Cross-site scripting (XSS) vulnerability in adv_pwd_cgi in the web management interface on Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 allows remote attackers to inject arbitrary web script or HTML via the pwd parameter.
Vulnerabilidad de XSS en adv_pwd_cgi en la interfaz de gestión web en dispositivos Arris DG860A, TG862A y TG862G con firmware TS0703128_100611 hasta la versión TS0705125D_031115 permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través del parámetro pwd.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-09-18 CVE Reserved
- 2015-11-21 CVE Published
- 2024-03-26 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| http://www.kb.cert.org/vuls/id/419568 | Third Party Advisory |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts070593c_073013 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts070593c_073013" | - |
Affected
| in | Arris Search vendor "Arris" | Dg860a Search vendor "Arris" for product "Dg860a" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts070593c_073013 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts070593c_073013" | - |
Affected
| in | Arris Search vendor "Arris" | Tg862a Search vendor "Arris" for product "Tg862a" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts070593c_073013 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts070593c_073013" | - |
Affected
| in | Arris Search vendor "Arris" | Tg862g Search vendor "Arris" for product "Tg862g" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts0703128_100611 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts0703128_100611" | - |
Affected
| in | Arris Search vendor "Arris" | Dg860a Search vendor "Arris" for product "Dg860a" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts0703128_100611 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts0703128_100611" | - |
Affected
| in | Arris Search vendor "Arris" | Tg862a Search vendor "Arris" for product "Tg862a" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts0703128_100611 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts0703128_100611" | - |
Affected
| in | Arris Search vendor "Arris" | Tg862g Search vendor "Arris" for product "Tg862g" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts0703135_112211 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts0703135_112211" | - |
Affected
| in | Arris Search vendor "Arris" | Dg860a Search vendor "Arris" for product "Dg860a" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts0703135_112211 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts0703135_112211" | - |
Affected
| in | Arris Search vendor "Arris" | Tg862a Search vendor "Arris" for product "Tg862a" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts0703135_112211 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts0703135_112211" | - |
Affected
| in | Arris Search vendor "Arris" | Tg862g Search vendor "Arris" for product "Tg862g" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts0705125_062314 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts0705125_062314" | - |
Affected
| in | Arris Search vendor "Arris" | Dg860a Search vendor "Arris" for product "Dg860a" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts0705125_062314 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts0705125_062314" | - |
Affected
| in | Arris Search vendor "Arris" | Tg862a Search vendor "Arris" for product "Tg862a" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts0705125_062314 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts0705125_062314" | - |
Affected
| in | Arris Search vendor "Arris" | Tg862g Search vendor "Arris" for product "Tg862g" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts0705125d_031115 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts0705125d_031115" | - |
Affected
| in | Arris Search vendor "Arris" | Dg860a Search vendor "Arris" for product "Dg860a" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts0705125d_031115 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts0705125d_031115" | - |
Affected
| in | Arris Search vendor "Arris" | Tg862a Search vendor "Arris" for product "Tg862a" | * | - |
Safe
|
| Arris Search vendor "Arris" | Na Model 862 Gw Mono Firmware Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" | ts0705125d_031115 Search vendor "Arris" for product "Na Model 862 Gw Mono Firmware" and version "ts0705125d_031115" | - |
Affected
| in | Arris Search vendor "Arris" | Tg862g Search vendor "Arris" for product "Tg862g" | * | - |
Safe
|