[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpdX5XE-nb7SYORxiYzOyCOgFn5DtkOp-5II_TXhzMaQ":3,"g5a-risk:CVE-2018-10990":113},{"success":4,"data":5,"meta":111},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":25,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":53,"references":54,"referencesCount":59,"weaknesses":60,"weaknessesCount":59,"isActivelyExploited":69,"cisaInfo":25,"otxData":25,"relatedBlogPosts":70,"seoMetadata":71,"configurations":96,"relatedVendorCves":109,"notableEvents":110},"CVE-2018-10990","What is CVE-2018-10990?","On Arris Touchstone Telephony Gateway TG1682G 9.1.103J6 devices, a logout action does not immediately destroy all state on the device related to the validity of the \"credential\" cookie, which might make it easier for attackers to obtain access at a later time (e.g., \"at least for a few minutes\"). NOTE: there is no documentation stating that the web UI's logout feature was supposed to do anything beyond removing the cookie from one instance of a web browser; a client-side logout action is often not intended to address cases where a person has made a copy of a cookie outside of a browser.","On Arris Touchstone Telephony Gateway TG1682G 9.1.103J6 devices, a logout action does not immediately destroy all state on the device related to the validity...","2018-05-14T14:29:00.35","2023-11-07T02:51:36.05",8,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":25,"CVSSMetricV2":28,"CVSSMetricV40":25},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","CHANGED",null,1.3,6,[29],{"Source":17,"Type":18,"CVSSData":30,"BaseSeverity":22,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":31,"VectorString":32,"AccessVector":21,"AccessComplexity":33,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:M\u002FAu:S\u002FC:P\u002FI:P\u002FA:C","MEDIUM","SINGLE","PARTIAL","COMPLETE",7.5,6.8,8.5,0.01073,[40,40,40,40,40,40,40],"High",[44,49],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"commscope","arris_tg1682g_firmware","9.1.103j6","cpe:2.3:o:commscope:arris_tg1682g_firmware:9.1.103j6:*:*:*:*:*:*:*",{"vendor":45,"product":50,"version":51,"criteria":52,"vulnerable":4},"arris_tg1682g","-","cpe:2.3:h:commscope:arris_tg1682g:-:*:*:*:*:*:*:*",2,[55],{"url":56,"source":57,"tags":58},"https:\u002F\u002Fmedium.com\u002F%40AkshaySharmaUS\u002Fcomcast-arris-touchstone-gateway-devices-are-vulnerable-heres-the-disclosure-7d603aa9342c","Medium",[],1,[61],{"id":62,"name":63,"description":64,"extendedDescription":65,"status":66,"abstraction":67,"structure":68},"CWE-613","Insufficient Session Expiration","According to WASC, \"Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization.\"","","Incomplete","Base","Simple",false,[],{"title":72,"metaDescription":73,"keywords":74,"canonicalUrl":75,"structuredData":76},"What is CVE-2018-10990? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-10990, a high severity cyber security vulnerability from 2018. On Arris Touchstone Telephony Gateway TG1682G 9.1.103J6 dev...","CVE-2018-10990, CVE-2018-10990 vulnerability, CVE-2018-10990 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, commscope security, arris_tg1682g_firmware vulnerability, arris_tg1682g vulnerability","\u002Fwhat-is\u002Fcve-2018-10990",{"@context":77,"@type":78,"headline":72,"description":73,"datePublished":10,"dateModified":11,"author":79,"publisher":83,"about":87,"mainEntityOfPage":91,"articleSection":94,"keywords":95},"https:\u002F\u002Fschema.org","TechArticle",{"@type":80,"name":81,"url":82},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":80,"name":81,"url":82,"logo":84},{"@type":85,"url":86},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":88,"name":6,"description":89,"additionalType":90},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":92,"@id":93},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-10990","Cybersecurity","CVE-2018-10990, CVE-2018-10990 vulnerability, CVE-2018-10990 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[97],{"Operator":98,"Negate":25,"Nodes":99},"AND",[100,105],{"Operator":101,"Negate":25,"CPEMatch":102},"OR",[103],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":104,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"B89139C7-E762-4F5F-A6AD-CC67CFC96136",{"Operator":101,"Negate":25,"CPEMatch":106},[107],{"Vulnerable":25,"Criteria":52,"MatchCriteriaID":108,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"5D2AFAD9-07CD-4960-801F-A602CB31BD61",[],[],{"lastModified":11,"cacheTime":112,"version":31},1792385680233,{"score":114,"band":57,"action":115,"scoredAt":116},46,"Plan remediation","2026-10-16T06:43:59.879605+00:00"]