CVE-2021-20119

PoC —

CVSS 3.1

7.1 high

EPSS

<1%p39

Published

Nov 9, 2021 (Nov 9, 2021)

Modified

Jun 17, 2026

Description

The password change utility for the Arris SurfBoard SB8200 can have safety measures bypassed that allow any logged-in user to change the administrator password.

Vendors: commscope
Products: arris surfboard sb8200 firmware
Weakness: CWE-863
Vector: CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.