Is CVE-2014-5437 actively exploited?

No active exploitation of CVE-2014-5437 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2014-5437 be exploited remotely?

Yes. CVE-2014-5437 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2014-5437?

CVE-2014-5437 has a CVSS score of 6.8 (MEDIUM).

HOME VULNERABILITIESCVE-2014-5437

MEDIUM

CVE-2014-5437

CWE-352Published: December 17, 2014· Updated: Jun 17, 2026

6.8

CVSS v3.1

Official Description

Multiple cross-site request forgery (CSRF) vulnerabilities in ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) enable remote management via a request to remote_management.php, (2) add a port forwarding rule via a request to port_forwarding_add.php, (3) change the wireless network to open via a request to wireless_network_configuration_edit.php, or (4) conduct cross-site scripting (XSS) attacks via the keyword parameter to managed_sites_add_keyword.php.

NVD Source

Technical Analysis

CVE-2014-5437 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.