[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fv2NEz2fIpRofmP4QEvZm48_n7AlAqHJT3yGByX7poIg":3,"g5a-risk:CVE-2015-7291":140},{"success":4,"data":5,"meta":138},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":28,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":64,"references":65,"referencesCount":74,"weaknesses":75,"weaknessesCount":84,"isActivelyExploited":31,"cisaInfo":28,"otxData":28,"relatedBlogPosts":85,"seoMetadata":86,"configurations":111,"relatedVendorCves":136,"notableEvents":137},"CVE-2015-7291","What is CVE-2015-7291?","Cross-site request forgery (CSRF) vulnerability in adv_pwd_cgi in the web management interface on Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 allows remote attackers to hijack the authentication of arbitrary users.","Cross-site request forgery (CSRF) vulnerability in adv_pwd_cgi in the web management interface on Arris DG860A, TG862A, and TG862G devices with firmware TS07...","2015-11-21T11:59:19.933","2026-06-17T00:32:12.223",6.8,"AV:N\u002FAC:M\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":32},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":24,"ExploitabilityScore":29,"ImpactScore":30,"ACInsufInfo":31,"ObtainAllPrivilege":31,"ObtainUserPrivilege":31,"ObtainOtherPrivilege":31,"UserInteractionRequired":4},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","MEDIUM","NONE","PARTIAL","",null,8.6,6.4,false,[],0.00952,[33,33,33,33,33,33,33],"Medium",[37,42,45,48,51,54,58,61],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"arris","na_model_862_gw_mono_firmware","ts070593c_073013","cpe:2.3:o:arris:na_model_862_gw_mono_firmware:ts070593c_073013:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":43,"criteria":44,"vulnerable":4},"ts0703128_100611","cpe:2.3:o:arris:na_model_862_gw_mono_firmware:ts0703128_100611:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":46,"criteria":47,"vulnerable":4},"ts0703135_112211","cpe:2.3:o:arris:na_model_862_gw_mono_firmware:ts0703135_112211:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":49,"criteria":50,"vulnerable":4},"ts0705125_062314","cpe:2.3:o:arris:na_model_862_gw_mono_firmware:ts0705125_062314:*:*:*:*:*:*:*",{"vendor":38,"product":39,"version":52,"criteria":53,"vulnerable":4},"ts0705125d_031115","cpe:2.3:o:arris:na_model_862_gw_mono_firmware:ts0705125d_031115:*:*:*:*:*:*:*",{"vendor":38,"product":55,"version":56,"criteria":57,"vulnerable":31},"dg860a","*","cpe:2.3:h:arris:dg860a:*:*:*:*:*:*:*:*",{"vendor":38,"product":59,"version":56,"criteria":60,"vulnerable":31},"tg862a","cpe:2.3:h:arris:tg862a:*:*:*:*:*:*:*:*",{"vendor":38,"product":62,"version":56,"criteria":63,"vulnerable":31},"tg862g","cpe:2.3:h:arris:tg862g:*:*:*:*:*:*:*:*",8,[66,72],{"url":67,"source":68,"tags":69},"http:\u002F\u002Fwww.kb.cert.org\u002Fvuls\u002Fid\u002F419568","Cert",[70,71],"Third Party Advisory","US Government Resource",{"url":67,"source":68,"tags":73},[70,71],2,[76],{"id":77,"name":78,"description":79,"extendedDescription":80,"status":81,"abstraction":82,"structure":83},"CWE-352","Cross-Site Request Forgery (CSRF)","The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.","When a web server is designed to receive a request from a client without any mechanism for verifying that it was intentionally sent, then it might be possible for an attacker to trick a client into making an unintentional request to the web server which will be treated as an authentic request. This can be done via a URL, image load, XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.","Stable","Compound","Composite",1,[],{"title":87,"metaDescription":88,"keywords":89,"canonicalUrl":90,"structuredData":91},"What is CVE-2015-7291? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2015-7291, a medium severity cyber security vulnerability from 2015. Cross-site request forgery (CSRF) vulnerability in adv_pwd...","CVE-2015-7291, CVE-2015-7291 vulnerability, CVE-2015-7291 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2015, CVSS score, exploit, patch, remediation, arris security, na_model_862_gw_mono_firmware vulnerability, dg860a vulnerability, tg862a vulnerability, tg862g vulnerability","\u002Fwhat-is\u002Fcve-2015-7291",{"@context":92,"@type":93,"headline":87,"description":88,"datePublished":10,"dateModified":11,"author":94,"publisher":98,"about":102,"mainEntityOfPage":106,"articleSection":109,"keywords":110},"https:\u002F\u002Fschema.org","TechArticle",{"@type":95,"name":96,"url":97},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":95,"name":96,"url":97,"logo":99},{"@type":100,"url":101},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":103,"name":6,"description":104,"additionalType":105},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":107,"@id":108},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2015-7291","Cybersecurity","CVE-2015-7291, CVE-2015-7291 vulnerability, CVE-2015-7291 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[112],{"Operator":113,"Negate":28,"Nodes":114},"AND",[115,128],{"Operator":116,"Negate":31,"CPEMatch":117},"OR",[118,120,122,124,126],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":119,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"CE587573-08E6-414D-98DC-9187C365F583",{"Vulnerable":4,"Criteria":44,"MatchCriteriaID":121,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"B86E7209-225B-465F-8127-21267B78A0D8",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":123,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"9B1FFC16-7E5C-46B3-88FA-3B572227AC25",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":125,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"0E630C0D-DAF6-4CFD-948E-E43CC7FA12D8",{"Vulnerable":4,"Criteria":53,"MatchCriteriaID":127,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"FF86A127-AC02-42B7-905F-46A3B7D618CC",{"Operator":116,"Negate":31,"CPEMatch":129},[130,132,134],{"Vulnerable":31,"Criteria":57,"MatchCriteriaID":131,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"9F752C6F-5269-4330-A1B4-F575EF4ACD70",{"Vulnerable":31,"Criteria":60,"MatchCriteriaID":133,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"214B7318-F67E-4B24-81C7-51863868BE8B",{"Vulnerable":31,"Criteria":63,"MatchCriteriaID":135,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"7C41240B-0116-4F89-93BB-553F9A30065F",[],[],{"lastModified":11,"cacheTime":139,"version":22},1793227832619,{"score":141,"band":142,"action":143,"scoredAt":144},21,"Low","Monitor","2026-07-01T10:19:39.191944+00:00"]