[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYJ06kpTg8jlAz450uYRtxu28MQoTo9EvZ7jdn-_oMPM":3,"g5a-risk:CVE-2023-27571":123},{"success":4,"data":5,"meta":120},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":33,"epssPercentile":26,"epssTimeSeries":34,"severity":35,"affectedProducts":36,"affectedProductsCount":46,"references":47,"referencesCount":67,"weaknesses":68,"weaknessesCount":77,"isActivelyExploited":78,"cisaInfo":26,"otxData":26,"relatedBlogPosts":79,"seoMetadata":80,"configurations":105,"relatedVendorCves":118,"notableEvents":119},"CVE-2023-27571","What is CVE-2023-27571?","An issue was discovered in DG3450 Cable Gateway AR01.02.056.18_041520_711.NCS.10. The troubleshooting_logs_download.php log file download functionality does not check the session cookie. Thus, an attacker can download all log files.","An issue was discovered in DG3450 Cable Gateway AR01.02.056.18_041520_711.NCS.10. The troubleshooting_logs_download.php log file download functionality does ...","2023-04-15T00:15:07.527","2025-02-10T16:15:34.29",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","MEDIUM",null,3.9,1.4,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"134c704f-9b21-4f2e-91b3-4a467353bcc0","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},0.009,[33,33,33,33,33,33,33],"Medium",[37,42],{"vendor":38,"product":39,"version":40,"criteria":41,"vulnerable":4},"commscope","dg3450_firmware","ar01.02.056.18_041520_711.ncs.10","cpe:2.3:o:commscope:dg3450_firmware:ar01.02.056.18_041520_711.ncs.10:*:*:*:*:*:*:*",{"vendor":38,"product":43,"version":44,"criteria":45,"vulnerable":4},"dg3450","-","cpe:2.3:h:commscope:dg3450:-:*:*:*:*:*:*:*",2,[48,54,57,61,63,65],{"url":49,"source":50,"tags":51},"https:\u002F\u002Fsec-consult.com\u002Fen\u002Fvulnerability-lab\u002Fadvisories\u002Findex.html","Sec-consult",[52,53],"Exploit","Third Party Advisory",{"url":55,"source":50,"tags":56},"https:\u002F\u002Fsec-consult.com\u002Fvulnerability-lab\u002Fadvisory\u002Fmultiple-vulnerabilities-in-arris-dg3450-cable-gateway\u002F",[52,53],{"url":58,"source":50,"tags":59},"https:\u002F\u002Fwww.sec-consult.com\u002Fen\u002Fblog\u002F",[60],"Not Applicable",{"url":49,"source":50,"tags":62},[52,53],{"url":55,"source":50,"tags":64},[52,53],{"url":58,"source":50,"tags":66},[60],6,[69],{"id":70,"name":71,"description":72,"extendedDescription":73,"status":74,"abstraction":75,"structure":76},"CWE-306","Missing Authentication for Critical Function","The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.","","Draft","Base","Simple",1,false,[],{"title":81,"metaDescription":82,"keywords":83,"canonicalUrl":84,"structuredData":85},"What is CVE-2023-27571? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-27571, a medium severity cyber security vulnerability from 2023. An issue was discovered in DG3450 Cable Gateway AR01.02.0...","CVE-2023-27571, CVE-2023-27571 vulnerability, CVE-2023-27571 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, commscope security, dg3450_firmware vulnerability, dg3450 vulnerability","\u002Fwhat-is\u002Fcve-2023-27571",{"@context":86,"@type":87,"headline":81,"description":82,"datePublished":10,"dateModified":11,"author":88,"publisher":92,"about":96,"mainEntityOfPage":100,"articleSection":103,"keywords":104},"https:\u002F\u002Fschema.org","TechArticle",{"@type":89,"name":90,"url":91},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":89,"name":90,"url":91,"logo":93},{"@type":94,"url":95},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":97,"name":6,"description":98,"additionalType":99},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":101,"@id":102},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-27571","Cybersecurity","CVE-2023-27571, CVE-2023-27571 vulnerability, CVE-2023-27571 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[106],{"Operator":107,"Negate":26,"Nodes":108},"AND",[109,114],{"Operator":110,"Negate":26,"CPEMatch":111},"OR",[112],{"Vulnerable":4,"Criteria":41,"MatchCriteriaID":113,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"2371D0A5-AC99-4CBD-B052-518272F2C45D",{"Operator":110,"Negate":26,"CPEMatch":115},[116],{"Vulnerable":26,"Criteria":45,"MatchCriteriaID":117,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"62BED3D5-B845-4898-850D-29FF69A8E8E9",[],[],{"lastModified":11,"cacheTime":121,"version":122},1792386627348,"2.0",{"score":124,"band":35,"action":125,"scoredAt":126},42,"Plan remediation","2026-10-16T06:57:45.970051+00:00"]