Arris vulnerabilities

Products

• Vap2500 Firmware 6
• Sbr-ac1200p Firmware 5
• Sbr-ac1900p Firmware 5
• Sbr-ac3200p Firmware 5
• Na Model 862 Gw Mono Firmware 4
• Touchstone Tg862g\/ct Firmware 3
• Vap2500 3
• Vip1113 3

Newest

• arris vip1113 Arris VIP1113 devices through 2025-05-30 with KreaTV SDK have a firmware decryption key of... CVE-2025-49164 4.3 MediumJune 2, 2025
• arris vip1113 Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting an arbitrary image via a... CVE-2025-49163 6.7 MediumJune 2, 2025
• arris vip1113 Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a... CVE-2025-49162 6.4 MediumJune 2, 2025
• arris vap2500, vap2500 firmware +1 more Arris VAP2500 tools_command.php command injection CVE-2024-5196 EPSS 23.6% 5.1 MediumMay 22, 2024
• arris vap2500, vap2500 firmware +1 more Arris VAP2500 diag_s.php command injection CVE-2024-5195 EPSS 23.6% 5.1 MediumMay 22, 2024
• arris vap2500, vap2500 firmware +1 more Arris VAP2500 assoc_table.php command injection CVE-2024-5194 5.1 MediumMay 22, 2024
• arris sbg6580 Arris SBG6580 devices have predictable default WPA2 security passwords that could lead to... CVE-2024-25729 8.8 HighMarch 7, 2024
• arris surfboard sbg6950ac2, commscope arris surfboard sbg6950ac2 firmware +1 more Arris SURFboard SBG6950AC2 Arbitrary Code Execution Vulnerability CVE-2024-23618 9.6 CriticalJanuary 25, 2024
• arris dg1670a firmware, dg860a firmware +1 more Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to... CVE-2023-40038 8.8 HighDecember 27, 2023
• arris tg1672g, tg852g, tg862g +3 more +5 more An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker (in... CVE-2023-40039 9.8 CriticalSeptember 11, 2023
• arris nvg443b firmware A cross-site scripting (XSS) vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to... CVE-2022-45028 6.1 MediumDecember 13, 2022
• inglorion muhttpd, arris bgw210 firmware, bgw320 firmware +4 more +6 more do_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files... CVE-2022-31793 Public exploit EPSS 17.7% 7.5 HighAugust 4, 2022
• arris sbr-ac1200p firmware, sbr-ac1900p firmware, sbr-ac3200p firmware +2 more Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were... CVE-2022-26994 9.8 CriticalMarch 15, 2022
• arris sbr-ac1200p firmware, sbr-ac1900p firmware, sbr-ac3200p firmware +2 more Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were... CVE-2022-26993 9.8 CriticalMarch 15, 2022
• arris sbr-ac1200p firmware, sbr-ac1900p firmware, sbr-ac3200p firmware +2 more Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were... CVE-2022-26992 9.8 CriticalMarch 15, 2022
• arris sbr-ac1200p firmware, sbr-ac1900p firmware, sbr-ac3200p firmware +2 more Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were... CVE-2022-26991 9.8 CriticalMarch 15, 2022
• arris sbr-ac1200p firmware, sbr-ac1900p firmware, sbr-ac3200p firmware +2 more Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were... CVE-2022-26990 9.8 CriticalMarch 15, 2022
• arris ruckus zoneflex r500 firmware Ruckus ZoneFlex R500 104.0.0.0.1347 devices allow an authenticated attacker to execute arbitrary... CVE-2020-8438 7.2 HighJanuary 29, 2020
• arris dg950s firmware, commscope arris dg950a firmware +1 more ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover... CVE-2018-20383 9.8 CriticalDecember 23, 2018
• arris tg1682g firmware, cisco dpc3939b firmware +1 more The Comcast firmware on Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version... CVE-2017-9490 8.8 HighJuly 31, 2017
• arris na model 862 gw mono firmware Cross-site request forgery (CSRF) vulnerability in adv_pwd_cgi in the web management interface on... CVE-2015-7291 6.8 MediumNovember 21, 2015
• arris na model 862 gw mono firmware Cross-site scripting (XSS) vulnerability in adv_pwd_cgi in the web management interface on Arris... CVE-2015-7290 4.3 MediumNovember 21, 2015
• arris na model 862 gw mono firmware Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115... CVE-2015-7289 9.3 HighNovember 21, 2015
• arris na model 862 gw mono firmware Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115... CVE-2009-5149 4.3 MediumNovember 21, 2015
• arris touchstone tg862g\/ct firmware ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default... CVE-2014-9406 10.0 HighDecember 18, 2014
• arris touchstone tg862g\/ct firmware Cross-site scripting (XSS) vulnerability in ARRIS Touchstone TG862G/CT Telephony Gateway with... CVE-2014-5438 3.5 LowDecember 17, 2014
• arris touchstone tg862g\/ct firmware Multiple cross-site request forgery (CSRF) vulnerabilities in ARRIS Touchstone TG862G/CT... CVE-2014-5437 6.8 MediumDecember 17, 2014
• arris vap2500 firmware The management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to obtain... CVE-2014-8425 Public exploit 7.8 HighNovember 28, 2014
• arris vap2500 firmware ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers... CVE-2014-8424 Public exploit EPSS 59.6% 7.8 HighNovember 28, 2014
• arris vap2500 firmware Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote... CVE-2014-8423 Public exploit EPSS 62.5% 10.0 HighNovember 28, 2014
• arris touchstone dg950a, touchstone dg950a software +1 more The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public,... CVE-2014-4863 EPSS 15.7% 5.0 MediumSeptember 5, 2014
• arris cadant c3 cmts Arris Cadant C3 CMTS allows remote attackers to cause a denial of service (service termination)... CVE-2007-2796 7.8 HighJune 12, 2007