[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fx7p3s6KfNEzSltiiJIDUd8JT8W9L75-uV6CNksM5c2w":3,"g5a-risk:CVE-2008-2002":137},{"success":4,"data":5,"meta":135},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":29,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":43,"references":44,"referencesCount":89,"weaknesses":90,"weaknessesCount":43,"isActivelyExploited":32,"cisaInfo":29,"otxData":29,"relatedBlogPosts":99,"seoMetadata":100,"configurations":125,"relatedVendorCves":133,"notableEvents":134},"CVE-2008-2002","What is CVE-2008-2002?","Multiple cross-site request forgery (CSRF) vulnerabilities on Motorola Surfboard with software SB5100-2.3.3.0-SCM00-NOSH allow remote attackers to (1) cause a denial of service (device reboot) via the \"Restart Cable Modem\" value in the BUTTON_INPUT parameter to configdata.html, and (2) cause a denial of service (hard reset) via the \"Reset All Defaults\" value in the BUTTON_INPUT parameter to configdata.html.","Multiple cross-site request forgery (CSRF) vulnerabilities on Motorola Surfboard with software SB5100-2.3.3.0-SCM00-NOSH allow remote attackers to (1) cause ...","2008-04-28T20:05:00","2026-06-16T22:52:55.15",7.8,"AV:N\u002FAC:M\u002FAu:N\u002FC:N\u002FI:P\u002FA:C",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":30,"ExploitabilityScore":31,"ImpactScore":12,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":4},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":25,"IntegrityImpact":26,"AvailabilityImpact":27,"BaseScore":12,"BaseSeverity":28,"Exploitability":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"CollateralDamagePotential":29,"TargetDistribution":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"EnvironmentalScore":29},"2.0","NETWORK","MEDIUM","NONE","PARTIAL","COMPLETE","",null,"HIGH",8.6,false,[],0.01458,[34,34,34,34,34,34,34],"High",[38],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"motorola","surfboard","sb5100","cpe:2.3:h:motorola:surfboard:sb5100:*:*:*:*:*:*:*",1,[45,49,53,58,63,67,71,75,77,79,81,83,85,87],{"url":46,"source":47,"tags":48},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F30026","Secunia",[],{"url":50,"source":51,"tags":52},"http:\u002F\u002Fsecurityreason.com\u002Fsecurityalert\u002F3839","Securityreason",[],{"url":54,"source":55,"tags":56},"http:\u002F\u002Fwww.kb.cert.org\u002Fvuls\u002Fid\u002F643049","Cert",[57],"US Government Resource",{"url":59,"source":60,"tags":61},"http:\u002F\u002Fwww.rooksecurity.com\u002Fblog\u002F?p=4","Rooksecurity",[62],"Exploit",{"url":64,"source":65,"tags":66},"http:\u002F\u002Fwww.securityfocus.com\u002Farchive\u002F1\u002F491143\u002F100\u002F0\u002Fthreaded","Securityfocus",[],{"url":68,"source":69,"tags":70},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2008\u002F1390\u002Freferences","Vupen",[],{"url":72,"source":73,"tags":74},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F42091","Ibmcloud",[],{"url":46,"source":47,"tags":76},[],{"url":50,"source":51,"tags":78},[],{"url":54,"source":55,"tags":80},[57],{"url":59,"source":60,"tags":82},[62],{"url":64,"source":65,"tags":84},[],{"url":68,"source":69,"tags":86},[],{"url":72,"source":73,"tags":88},[],14,[91],{"id":92,"name":93,"description":94,"extendedDescription":95,"status":96,"abstraction":97,"structure":98},"CWE-352","Cross-Site Request Forgery (CSRF)","The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.","When a web server is designed to receive a request from a client without any mechanism for verifying that it was intentionally sent, then it might be possible for an attacker to trick a client into making an unintentional request to the web server which will be treated as an authentic request. This can be done via a URL, image load, XMLHttpRequest, etc. and can result in exposure of data or unintended code execution.","Stable","Compound","Composite",[],{"title":101,"metaDescription":102,"keywords":103,"canonicalUrl":104,"structuredData":105},"What is CVE-2008-2002? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2008-2002, a high severity cyber security vulnerability from 2008. Multiple cross-site request forgery (CSRF) vulnerabilities o...","CVE-2008-2002, CVE-2008-2002 vulnerability, CVE-2008-2002 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2008, CVSS score, exploit, patch, remediation, motorola security, surfboard vulnerability","\u002Fwhat-is\u002Fcve-2008-2002",{"@context":106,"@type":107,"headline":101,"description":102,"datePublished":10,"dateModified":11,"author":108,"publisher":112,"about":116,"mainEntityOfPage":120,"articleSection":123,"keywords":124},"https:\u002F\u002Fschema.org","TechArticle",{"@type":109,"name":110,"url":111},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":109,"name":110,"url":111,"logo":113},{"@type":114,"url":115},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":117,"name":6,"description":118,"additionalType":119},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":121,"@id":122},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2008-2002","Cybersecurity","CVE-2008-2002, CVE-2008-2002 vulnerability, CVE-2008-2002 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[126],{"Operator":29,"Negate":29,"Nodes":127},[128],{"Operator":129,"Negate":32,"CPEMatch":130},"OR",[131],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":132,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":29,"VersionEndIncluding":29},"DBCE9917-8A66-4E98-87F4-DA66ACD1CA62",[],[],{"lastModified":11,"cacheTime":136,"version":22},1792458483946,{"score":138,"band":139,"action":140,"scoredAt":141},45,"Medium","Plan remediation","2026-10-19T06:36:56.937837+00:00"]