CVE-2021-20120

8.8 highEPSS 0.6%

High (8.8) in commscope arris surfboard sb8200 firmware. EPSS 0.6% chance of exploitation in the next 30 days.

The administration web interface for the Arris Surfboard SB8200 lacks any protections against cross-site request forgery attacks. This means that an attacker could make configuration changes (such as changing the administrative password) without the consent of the user.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2021-10-21
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

commscope:arris_surfboard_sb8200_firmware

References

https://www.tenable.com/security/research/tra-2021-45
https://www.tenable.com/security/research/tra-2021-45

Check your stack JSON