Bernardo Rodrigues

**Name of the Vulnerable Software and Affected Versions** Simple File List WordPress plugin versions up to and including 3.2.7 **Description** The issue allows unauthenticated attackers to download arbitrary files due to missing controls in the `eeFile` parameter found in the ~/includes/ee-downloader.php file. This enables attackers to supply a path to a file that will subsequently be downloaded. **Recommendations** For versions up to and including 3.2.7, update to a version that includes the necessary controls for the `eeFile` parameter to prevent arbitrary file downloads. As a temporary workaround, consider restricting access to the ~/includes/ee-downloader.php file until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Arris DG860A versions TS0703128 100611 through TS0705125D 031115 Arris TG862A versions TS0703128 100611 through TS0705125D 031115 Arris TG862G versions TS0703128 100611 through TS0705125D 031115 **Description** The issue concerns a hardcoded administrator password that can be derived from the device's serial number, making it easier for remote attackers to gain access. This access can be obtained through various interfaces, including the web management interface, SSH, TELNET, or SNMP. **Recommendations** For Arris DG860A versions TS0703128 100611 through TS0705125D 031115, consider changing the administrator password to a strong, unique password as soon as possible. For Arris TG862A versions TS0703128 100611 through TS0705125D 031115, consider changing the administrator password to a strong, unique password as soon as possible. For Arris TG862G versions TS0703128 100611 through TS0705125D 031115, consider changing the administrator password to a strong, unique password as soon as possible.

**Name of the Vulnerable Software and Affected Versions** Arris DG860A versions TS0703128 100611 through TS0705125D 031115 Arris TG862A versions TS0703128 100611 through TS0705125D 031115 Arris TG862G versions TS0703128 100611 through TS0705125D 031115 **Description** A cross-site scripting (XSS) issue exists in the web management interface of the affected devices, allowing remote attackers to inject arbitrary web script or HTML via the `pwd` parameter. This could potentially lead to unauthorized access or control of the device. **Recommendations** For Arris DG860A versions TS0703128 100611 through TS0705125D 031115, avoid using the `pwd` parameter in the affected API endpoint until the issue is resolved. For Arris TG862A versions TS0703128 100611 through TS0705125D 031115, avoid using the `pwd` parameter in the affected API endpoint until the issue is resolved. For Arris TG862G versions TS0703128 100611 through TS0705125D 031115, avoid using the `pwd` parameter in the affected API endpoint until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Arris DG860A versions TS0703128 100611 through TS0705125D 031115 Arris TG862A versions TS0703128 100611 through TS0705125D 031115 Arris TG862G versions TS0703128 100611 through TS0705125D 031115 **Description** A cross-site request forgery (CSRF) issue exists in the `adv pwd cgi` component of the web management interface, allowing remote attackers to hijack the authentication of arbitrary users. **Recommendations** For Arris DG860A versions TS0703128 100611 through TS0705125D 031115, consider disabling access to the `adv pwd cgi` component in the web management interface until a fix is available. For Arris TG862A versions TS0703128 100611 through TS0705125D 031115, consider disabling access to the `adv pwd cgi` component in the web management interface until a fix is available. For Arris TG862G versions TS0703128 100611 through TS0705125D 031115, consider disabling access to the `adv pwd cgi` component in the web management interface until a fix is available.