Commscope vulnerabilities

Products

• Ruckus Network Director 9
• Arris Tg1682g Firmware 8
• Arris Tr3300 Firmware 8
• Ruckus Iot Controller 7
• Ruckus Smartzone Firmware 6
• Ruckus Zoneflex R500 Firmware 3
• Arris Surfboard Sb8200 Firmware 2
• Arris Surfboard Sbg6950ac2 Firmware 2
• Dg3450 Firmware 2
• Ruckus Vriot 2
• Tr4400 Firmware 2

Newest

• commscope ruckus network director In RUCKUS Network Director (RND) < 4.5.0.56, the OVA appliance contains hardcoded SSH keys for... CVE-2025-67305 9.8 CriticalFebruary 19, 2026
• commscope ruckus network director In Ruckus Network Director (RND) < 4.5.0.54, the OVA appliance contains hardcoded credentials for... CVE-2025-67304 9.8 CriticalFebruary 19, 2026
• commscope ruckus network director, ruckus network director +1 more RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker... CVE-2025-44963 9.0 CriticalAugust 4, 2025
• ruckus smartzone, commscope ruckus network director, ruckus smartzone firmware +2 more RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files. CVE-2025-44962 5.0 MediumAugust 4, 2025
• ruckus smartzone, commscope ruckus network director, ruckus smartzone firmware +2 more In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP... CVE-2025-44961 9.9 CriticalAugust 4, 2025
• ruckus smartzone, commscope ruckus network director, ruckus smartzone firmware +2 more RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain... CVE-2025-44960 8.5 HighAugust 4, 2025
• commscope ruckus network director, ruckus network director +1 more RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format. CVE-2025-44958 5.3 MediumAugust 4, 2025
• ruckus smartzone, commscope ruckus network director, ruckus smartzone firmware +2 more Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API... CVE-2025-44957 8.5 HighAugust 4, 2025
• commscope ruckus network director, ruckus network director +1 more RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak,... CVE-2025-44955 8.8 HighAugust 4, 2025
• ruckus smartzone, commscope ruckus smartzone firmware +1 more RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root... CVE-2025-44954 9.0 CriticalAugust 4, 2025
• arris surfboard sbg6950ac2, commscope arris surfboard sbg6950ac2 firmware +1 more Arris SURFboard SBG6950AC2 Arbitrary Code Execution Vulnerability CVE-2024-23618 9.6 CriticalJanuary 25, 2024
• commscope ruckus cloudpath enrollment system Cross Site Scripting vulnerability in Ruckus Wireless (CommScope) Ruckus CloudPath v.5.12.54414... CVE-2023-45992 Public exploit 9.6 CriticalOctober 19, 2023
• commscope dg3450 firmware An issue was discovered in CommScope Arris DG3450 Cable Gateway AR01.02.056.18_041520_711.NCS.10.... CVE-2023-27572 6.1 MediumApril 14, 2023
• commscope dg3450 firmware An issue was discovered in DG3450 Cable Gateway AR01.02.056.18_041520_711.NCS.10. The... CVE-2023-27571 5.3 MediumApril 14, 2023
• commscope arris tg2482a firmware, arris sbg10 firmware, arris tg2492 firmware +2 more Arris TG2482A firmware through 9.1.103GEM9 allow Remote Code Execution (RCE) via the ping utility... CVE-2022-45701 Public exploit EPSS 42.6% 8.8 HighFebruary 17, 2023
• ruckuswireless ruckus wireless admin, commscope ruckus smartzone firmware, ruckus wireless multiple products +1 more +3 more Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET... CVE-2023-25717 In KEV EPSS 98.1% 9.8 CriticalFebruary 13, 2023
• commscope arris tr3300 firmware Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the ddns... CVE-2022-27002 9.8 CriticalMarch 15, 2022
• commscope arris tr3300 firmware Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the dhcp... CVE-2022-27001 9.8 CriticalMarch 15, 2022
• commscope arris tr3300 firmware Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and... CVE-2022-27000 9.8 CriticalMarch 15, 2022
• commscope arris tr3300 firmware Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the static ip... CVE-2022-26999 9.8 CriticalMarch 15, 2022
• commscope arris tr3300 firmware Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the wps... CVE-2022-26998 9.8 CriticalMarch 15, 2022
• commscope arris tr3300 firmware Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the upnp... CVE-2022-26997 9.8 CriticalMarch 15, 2022
• commscope arris tr3300 firmware Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pppoe... CVE-2022-26996 9.8 CriticalMarch 15, 2022
• commscope arris tr3300 firmware Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pptp ... CVE-2022-26995 9.8 CriticalMarch 15, 2022
• commscope arris surfboard sbg10 firmware, arris surfboard sbg6950ac2 firmware, arris surfboard sbg7400ac2 firmware +2 more +4 more CommScope URFboard SBG6950AC2 9.1.103AA23 devices allow Command Injection. CVE-2021-41552 8.8 HighFebruary 15, 2022
• commscope arris surfboard sb8200 firmware The password change utility for the Arris SurfBoard SB8200 can have safety measures bypassed that... CVE-2021-20119 7.1 HighNovember 9, 2021
• commscope arris surfboard sb8200 firmware The administration web interface for the Arris Surfboard SB8200 lacks any protections against... CVE-2021-20120 8.8 HighOctober 21, 2021
• commscope ruckus iot controller An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. There are... CVE-2021-33221 EPSS 56.1% 9.8 CriticalJuly 7, 2021
• commscope ruckus iot controller An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. Hard-coded API... CVE-2021-33220 7.8 HighJuly 7, 2021
• commscope ruckus iot controller An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. There are Hard... CVE-2021-33219 9.8 CriticalJuly 7, 2021
• commscope ruckus iot controller An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. There are Hard... CVE-2021-33218 9.8 CriticalJuly 7, 2021
• commscope ruckus iot controller An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. The Web... CVE-2021-33217 8.8 HighJuly 7, 2021
• commscope ruckus iot controller An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. An Undocumented... CVE-2021-33216 Public exploit EPSS 13.8% 9.8 CriticalJuly 7, 2021
• commscope ruckus iot controller An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. The API allows... CVE-2021-33215 4.3 MediumJuly 7, 2021
• commscope ruckus vriot Ruckus vRioT through 1.5.1.0.21 has an API backdoor that is hardcoded into validate_token.py. An... CVE-2020-26879 EPSS 44.4% 9.8 CriticalOctober 26, 2020
• commscope ruckus vriot Ruckus through 1.5.1.0.21 is affected by remote command injection. An authenticated user can... CVE-2020-26878 Public exploit EPSS 11.6% 8.8 HighOctober 26, 2020
• commscope ruckus zoneflex r500 firmware CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to... CVE-2020-8830 8.8 HighMay 5, 2020
• commscope ruckus zoneflex r500 firmware Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field. CVE-2020-8033 6.1 MediumMay 5, 2020
• commscope ruckus zoneflex r500 firmware A CSRF issue in login.asp on Ruckus R500 3.4.2.0.384 devices allows remote attackers to access... CVE-2020-7983 8.1 HighMay 5, 2020
• commscope arris tg1692a firmware ARRIS TG1692A devices allow remote attackers to discover the administrator login name and... CVE-2020-9476 7.5 HighMarch 4, 2020
• commscope tr4400 firmware CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an... CVE-2019-15805 9.8 CriticalAugust 29, 2019
• commscope tr4400 firmware CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an... CVE-2019-15806 9.8 CriticalAugust 29, 2019
• commscope arris sbg6580-2 firmware ARRIS SBG6580-2 D30GW-SEAEAGLE-1.5.2.5-GA-00-NOSH devices allow remote attackers to discover... CVE-2018-20386 9.8 CriticalDecember 23, 2018
• arris dg950s firmware, commscope arris dg950a firmware +1 more ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover... CVE-2018-20383 9.8 CriticalDecember 23, 2018
• commscope arris tg2492lg-na firmware The web component on ARRIS TG2492LG-NA 061213 devices allows remote attackers to obtain sensitive... CVE-2018-17555 7.5 HighSeptember 26, 2018
• commscope arris tg1682g firmware On Arris Touchstone Telephony Gateway TG1682G 9.1.103J6 devices, a logout action does not... CVE-2018-10990 8.0 HighMay 14, 2018
• commscope arris tg1682g firmware Arris Touchstone Telephony Gateway TG1682G 9.1.103J6 devices are distributed by some ISPs with a... CVE-2018-10989 6.6 MediumMay 14, 2018
• commscope arris tg1682g firmware Arris TG1682G devices with Comcast TG1682_2.0s7_PRODse 10.0.59.SIP.PC20.CT software allow... CVE-2017-16836 Public exploit 6.1 MediumNovember 16, 2017
• cisco dpc3939 firmware, dpc3939b firmware, dpc3941t firmware +1 more +3 more The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a... CVE-2017-9521 9.8 CriticalJuly 31, 2017
• cisco dpc3939 firmware, dpc3939b firmware, dpc3941t firmware +1 more +3 more The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a... CVE-2017-9492 7.5 HighJuly 31, 2017
• Show olderLoading…