Sethsec

**Name of the Vulnerable Software and Affected Versions** UniFi Controller versions prior to 3.2.1 **Description** The issue allows remote attackers to hijack the authentication of administrators for various requests, including creating a new admin user, changing guest settings, blocking or unblocking users, and modifying syslog settings. Specifically, the affected API endpoints include "api/add/admin" for creating a new admin user, "api/add/wlanconf" for unspecified impact, "api/set/setting/guest access" for changing guest password, authentication method, or restricted subnets, "api/cmd/stamgr" for blocking, unblocking, or reconnecting users by MAC address, "api/set/setting/rsyslogd" for changing the syslog server or port, "api/set/setting/smtp" for unspecified impact, "api/cmd/cfgmgr" for changing syslog server, port, or authentication settings, and "api/set/setting/identity" for changing the Unifi Controller name. **Recommendations** For versions prior to 3.2.1, update to version 3.2.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the affected API endpoints until a patch is available. Avoid using the vulnerable API endpoints for sensitive operations until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** ARRIS Touchstone TG862G/CT Telephony Gateway versions 7.6.59S.CT and earlier **Description** The issue allows remote attackers to hijack the authentication of administrators for various requests, including enabling remote management via "remote management.php", adding a port forwarding rule via "port forwarding add.php", changing the wireless network to open via "wireless network configuration edit.php", or conducting cross-site scripting (XSS) attacks via the `keyword` parameter to "managed sites add keyword.php". **Recommendations** For ARRIS Touchstone TG862G/CT Telephony Gateway versions 7.6.59S.CT and earlier, consider disabling remote management and restricting access to the vulnerable API endpoints, such as "remote management.php", "port forwarding add.php", "wireless network configuration edit.php", and "managed sites add keyword.php", until a patch is available. Avoid using the `keyword` parameter in the "managed sites add keyword.php" endpoint to minimize the risk of cross-site scripting (XSS) attacks.