Arris Bgw210‑700
Approved changes feed: RSS · Atom
cpe:2.3:a:at&t:arris_bgw210‑700:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | At&T (c61b6cdd-8d64-59d2-b4d5-3a148356dfed) |
|---|---|
| Product | Arris Bgw210‑700 (29a1c79f-cf10-5571-8b69-d5e4b1ada95c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-16771 |
vulnerable | 2026-09-16 04:32:56.391032 |
CVE-2026-16771
In firmware versions 2.7.7 and earlier, the Arris BGW210‑700 gateway fails to enforce any server‑side authentication on its /cgi-bin/*.ha management endpoints, relying solely on client‑side CSS/JavaScript gating that can be bypassed by any HTTP client. This allows unauthenticated attackers on the LAN to read sensitive configuration data, modify persistent device settings, or trigger backend diagnostic operations. The issue appears systemic across the CGI handler chain.
Published: 2026-07-28T18:21:40.048Z
Updated: 2026-07-28T19:31:06.344Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.