[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpdX5XE-nb7SYORxiYzOyCOgFn5DtkOp-5II_TXhzMaQ":3,"g5a-risk:CVE-2018-10990":114},{"success":4,"data":5,"meta":112},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":25,"epssTimeSeries":41,"severity":43,"affectedProducts":44,"affectedProductsCount":54,"references":55,"referencesCount":60,"weaknesses":61,"weaknessesCount":60,"isActivelyExploited":70,"cisaInfo":25,"otxData":25,"relatedBlogPosts":71,"seoMetadata":72,"configurations":97,"relatedVendorCves":110,"notableEvents":111},"CVE-2018-10990","What is CVE-2018-10990?","On Arris Touchstone Telephony Gateway TG1682G 9.1.103J6 devices, a logout action does not immediately destroy all state on the device related to the validity of the \"credential\" cookie, which might make it easier for attackers to obtain access at a later time (e.g., \"at least for a few minutes\"). NOTE: there is no documentation stating that the web UI's logout feature was supposed to do anything beyond removing the cookie from one instance of a web browser; a client-side logout action is often not intended to address cases where a person has made a copy of a cookie outside of a browser.","On Arris Touchstone Telephony Gateway TG1682G 9.1.103J6 devices, a logout action does not immediately destroy all state on the device related to the validity...","2018-05-14T14:29:00.35","2023-11-07T02:51:36.05",8,"CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:H\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":25,"CVSSMetricV2":28,"CVSSMetricV40":25},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","HIGH","NONE","CHANGED",null,1.3,6,[29],{"Source":17,"Type":18,"CVSSData":30,"BaseSeverity":22,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":25,"ObtainAllPrivilege":25,"ObtainUserPrivilege":25,"ObtainOtherPrivilege":25,"UserInteractionRequired":25},{"Version":31,"VectorString":32,"AccessVector":21,"AccessComplexity":33,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":25,"Exploitability":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"CollateralDamagePotential":25,"TargetDistribution":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":25,"EnvironmentalScore":25},"2.0","AV:N\u002FAC:M\u002FAu:S\u002FC:P\u002FI:P\u002FA:C","MEDIUM","SINGLE","PARTIAL","COMPLETE",7.5,6.8,8.5,0.01066,[42,42,40,40,40,40,40],0.01073,"High",[45,50],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"commscope","arris_tg1682g_firmware","9.1.103j6","cpe:2.3:o:commscope:arris_tg1682g_firmware:9.1.103j6:*:*:*:*:*:*:*",{"vendor":46,"product":51,"version":52,"criteria":53,"vulnerable":4},"arris_tg1682g","-","cpe:2.3:h:commscope:arris_tg1682g:-:*:*:*:*:*:*:*",2,[56],{"url":57,"source":58,"tags":59},"https:\u002F\u002Fmedium.com\u002F%40AkshaySharmaUS\u002Fcomcast-arris-touchstone-gateway-devices-are-vulnerable-heres-the-disclosure-7d603aa9342c","Medium",[],1,[62],{"id":63,"name":64,"description":65,"extendedDescription":66,"status":67,"abstraction":68,"structure":69},"CWE-613","Insufficient Session Expiration","According to WASC, \"Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization.\"","","Incomplete","Base","Simple",false,[],{"title":73,"metaDescription":74,"keywords":75,"canonicalUrl":76,"structuredData":77},"What is CVE-2018-10990? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2018-10990, a high severity cyber security vulnerability from 2018. On Arris Touchstone Telephony Gateway TG1682G 9.1.103J6 dev...","CVE-2018-10990, CVE-2018-10990 vulnerability, CVE-2018-10990 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, commscope security, arris_tg1682g_firmware vulnerability, arris_tg1682g vulnerability","\u002Fwhat-is\u002Fcve-2018-10990",{"@context":78,"@type":79,"headline":73,"description":74,"datePublished":10,"dateModified":11,"author":80,"publisher":84,"about":88,"mainEntityOfPage":92,"articleSection":95,"keywords":96},"https:\u002F\u002Fschema.org","TechArticle",{"@type":81,"name":82,"url":83},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":81,"name":82,"url":83,"logo":85},{"@type":86,"url":87},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":89,"name":6,"description":90,"additionalType":91},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":93,"@id":94},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2018-10990","Cybersecurity","CVE-2018-10990, CVE-2018-10990 vulnerability, CVE-2018-10990 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[98],{"Operator":99,"Negate":25,"Nodes":100},"AND",[101,106],{"Operator":102,"Negate":25,"CPEMatch":103},"OR",[104],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":105,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"B89139C7-E762-4F5F-A6AD-CC67CFC96136",{"Operator":102,"Negate":25,"CPEMatch":107},[108],{"Vulnerable":25,"Criteria":53,"MatchCriteriaID":109,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"5D2AFAD9-07CD-4960-801F-A602CB31BD61",[],[],{"lastModified":11,"cacheTime":113,"version":31},1793241766576,{"score":115,"band":58,"action":116,"scoredAt":117},46,"Plan remediation","2026-10-28T06:43:57.527785+00:00"]