VDB

GCVE-110-CERTCC-2015-419568

GCVE-110-CERTCC-2015-419568
Advisory PublishedCVSS 7.5/10
Vulnetix · Advisory published November 20, 2015
Multiple models of ARRIS cable modems contain multiple, deterministically generated backdoor passwords, as well as multiple cross-site scripting (XSS) and cross-site request forgery (CSRF) vulnerabilities.
Download JSON Open in Console

Risk Scores

CVSS 2.0
7.5/10
High · AV:N/AC:L/Au:N/C:P/I:P/A:P
certcc-cam
certcc-cam
impact0population0exploitation0widely_known0score_current0ease_of_exploitation0
certcc-vrda
certcc-vrda
d1_impact3d1_population3d1_direct_report1
certcc-cvss-temporal-env
certcc-cvss-temporal-env
temporal_score6.8remediation_levelUreport_confidenceCenvironmental_score6.736193183475target_distributionHenvironmental_vectorCDP:ND/TD:H/CR:ND/IR:ND/AR:ND

Aliases

CVE-2009-5149CVE-2015-7289CVE-2015-7290CVE-2015-7291

References

ARRIS cable modems generate passwords deterministically and contain XSS and CSRF vulnerabilities
url
ARRIS cable modems generate passwords deterministically and contain XSS and CSRF vulnerabilities
url
ARRIS cable modems generate passwords deterministically and contain XSS and CSRF vulnerabilities
url
ARRIS cable modems generate passwords deterministically and contain XSS and CSRF vulnerabilities
url
ARRIS cable modems generate passwords deterministically and contain XSS and CSRF vulnerabilities
url
ARRIS cable modems generate passwords deterministically and contain XSS and CSRF vulnerabilities
url
ARRIS cable modems generate passwords deterministically and contain XSS and CSRF vulnerabilities
url
ARRIS cable modems generate passwords deterministically and contain XSS and CSRF vulnerabilities
url
ARRIS cable modems generate passwords deterministically and contain XSS and CSRF vulnerabilities
url
ARRIS cable modems generate passwords deterministically and contain XSS and CSRF vulnerabilities
advisory
ARRIS cable modems generate passwords deterministically and contain XSS and CSRF vulnerabilities
sighting
ARRIS cable modems generate passwords deterministically and contain XSS and CSRF vulnerabilities
sighting
ARRIS cable modems generate passwords deterministically and contain XSS and CSRF vulnerabilities
sighting
ARRIS cable modems generate passwords deterministically and contain XSS and CSRF vulnerabilities
exploit

Browse GCVE Records

74,947 records in the GCVE database · Updated July 28, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›