PT-2018-10229 · Arris · Arris Touchstone Telephony Gateway Tg1682G

Published 2018-05-14 · Updated 2021-09-13 · CVE-2018-10990

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Arris Touchstone Telephony Gateway TG1682G version 9.1.103J6

Description The logout action on the device does not immediately destroy all state related to the validity of the credential cookie. This might allow attackers to obtain access at a later time, for example, at least for a few minutes. It is noted that the web UI's logout feature is not intended to address cases where a person has made a copy of a cookie outside of a browser.

Recommendations For Arris Touchstone Telephony Gateway TG1682G version 9.1.103J6, as a temporary workaround, consider implementing additional security measures to minimize the risk of exploitation, such as restricting access to sensitive areas of the web UI after a logout action. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Insufficient Session Expiration

Weakness Enumeration

CWE-613

Related Identifiers

CVE-2018-10990

Affected Products

Arris Touchstone Telephony Gateway Tg1682G

References · 4

• 🔥 https://medium.com/@AkshaySharmaUS/comcast-arris-touchstone-gateway-devices-are-vulnerable-heres-the-disclosure-7d603aa9342c · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-10990 · Security Note
• https://osv.dev/vulnerability/CVE-2018-10990 · Vendor Advisory
• https://medium.com/%40AkshaySharmaUS/comcast-arris-touchstone-gateway-devices-are-vulnerable-heres-the-disclosure-7d603aa9342c · Note