CVE-2021-20119: Commscope Arris Surfboard SB8200 Firmware

High severity, CVSS 7.1. EPSS: 0.5% chance of exploitation in the next 30 days.

The password change utility for the Arris SurfBoard SB8200 can have safety measures bypassed that allow any logged-in user to change the administrator password.

Affected products

• Commscope Arris Surfboard SB8200 Firmware: version ab01.02.053.01_112320_193.0a.nsh only

Published 2021-11-09. Last modified 2026-06-17.