CVE-2014-3778

Motorola SBG901 Wireless Modem - Cross-Site Request Forgery

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2014-3778 has a selected CVSS score of 6.8; EIP currently links 1 catalogued exploit.

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in goform/RgDdns in ARRIS (formerly Motorola) SBG901 SURFboard Wireless Cable Modem allow remote attackers to hijack the authentication of administrators for requests that (1) change the dns service via the DdnsService parameter, (2) change the username via the DdnsUserName parameter, (3) change the password via the DdnsPassword parameter, or (4) change the host name via the DdnsHostName parameter.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBMotorola SBG901 Wireless Modem - Cross-Site Request ForgeryExploitDB exploitby Blessen ThomasNot analyzed1 file
ExploitDB
PoC details

References

2