CVE-2014-3778

no score yetEPSS 1.9%

Multiple cross-site request forgery (CSRF) vulnerabilities in goform/RgDdns in ARRIS (formerly Motorola) SBG901 SURFboard Wireless Cable Modem allow remote attackers to hijack the authentication of administrators for requests that (1) change the dns service via the DdnsService parameter, (2) change the username via the DdnsUserName parameter, (3) change the password via the DdnsPassword parameter, or (4) change the host name via the DdnsHostName parameter.

EPSS: 1.9% chance of exploitation in the next 30 days; higher than 80% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2014-06-19
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

commscope:arris_sbg901

References

http://www.exploit-db.com/exploits/33792
http://www.exploit-db.com/exploits/33792

Check your stack JSON