İçeriğe atla
Noroxi

commscope kayıtları

commscope üreticisine ait 68 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
1 · %1,5
Silahlaştırılmış
2 · %2,9
Pre-auth RCE
14
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
88 gün

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

68 kayıt
  • CVE-2023-25717
    98Hemen

    Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    ruckuswireless · ruckus wireless admin13 Şub 2023

  • CVE-2021-33221
    56Planlayın

    An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier.

    KritikCVSS 9,8Kavram kanıtıEPSS %56

    commscope · ruckus iot controller7 Tem 2021

  • CVE-2020-26879
    53Planlayın

    Ruckus vRioT through 1.5.1.0.21 has an API backdoor that is hardcoded into validate_token.py.

    KritikCVSS 9,8Kavram kanıtıEPSS %45

    commscope · ruckus vriot26 Eki 2020

  • CVE-2022-45701
    48Planlayın

    Arris TG2482A firmware through 9.1.103GEM9 allow Remote Code Execution (RCE) via the ping utility feature.

    YüksekCVSS 8,8Kavram kanıtıEPSS %43

    commscope · arris tg2482a firmware17 Şub 2023

  • CVE-2021-33216
    43Planlayın

    An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier.

    KritikCVSS 9,8Kavram kanıtıEPSS %14

    commscope · ruckus iot controller7 Tem 2021

  • CVE-2022-27002
    41Planlayın

    Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the ddns function via the ddns_name, ddns_pwd, h_ddns、d

    KritikCVSS 9,8İstismar yokEPSS %5

    commscope · arris tr3300 firmware15 Mar 2022

  • CVE-2022-26998
    40Planlayın

    Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the wps setting function via the wps_enrolee_pin paramet

    KritikCVSS 9,8İstismar yokEPSS %3

    commscope · arris tr3300 firmware15 Mar 2022

  • CVE-2022-27001
    40Planlayın

    Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the dhcp function via the hostname parameter.

    KritikCVSS 9,8İstismar yokEPSS %3

    commscope · arris tr3300 firmware15 Mar 2022

  • CVE-2022-26999
    40Planlayın

    Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the static ip settings function via the wan_ip_stat, wan

    KritikCVSS 9,8İstismar yokEPSS %3

    commscope · arris tr3300 firmware15 Mar 2022

  • CVE-2022-26997
    40Planlayın

    Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the upnp function via the upnp_ttl parameter.

    KritikCVSS 9,8İstismar yokEPSS %3

    commscope · arris tr3300 firmware15 Mar 2022

  • CVE-2022-27000
    40Planlayın

    Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the h_primary_ntp_se

    KritikCVSS 9,8İstismar yokEPSS %3

    commscope · arris tr3300 firmware15 Mar 2022

  • CVE-2017-9521
    40Planlayın

    The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939

    KritikCVSS 9,8İstismar yokEPSS %3

    cisco · dpc3939 firmware30 Tem 2017

  • CVE-2022-26996
    40Planlayın

    Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pppoe function via the pppoe_username, pppoe_passwd,

    KritikCVSS 9,8İstismar yokEPSS %3

    commscope · arris tr3300 firmware15 Mar 2022

  • CVE-2022-26995
    40Planlayın

    Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pptp (wan_pptp.html) function via the pptp_fix_ip, p

    KritikCVSS 9,8İstismar yokEPSS %3

    commscope · arris tr3300 firmware15 Mar 2022

  • CVE-2021-33218
    40Planlayın

    An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier.

    KritikCVSS 9,8İstismar yokEPSS %2

    commscope · ruckus iot controller7 Tem 2021

  • CVE-2021-33219
    40Planlayın

    An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier.

    KritikCVSS 9,8İstismar yokEPSS %2

    commscope · ruckus iot controller7 Tem 2021

  • CVE-2018-20386
    40Planlayın

    ARRIS SBG6580-2 D30GW-SEAEAGLE-1.5.2.5-GA-00-NOSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.

    KritikCVSS 9,8İstismar yokEPSS %2

    commscope · arris sbg6580-2 firmware23 Ara 2018

  • CVE-2018-20383
    40Planlayın

    ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0

    KritikCVSS 9,8İstismar yokEPSS %2

    arris · dg950s firmware23 Ara 2018

  • CVE-2025-46121
    39İzleyin

    An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, where the functions `stamgr_cfg_adpt_addS

    KritikCVSS 9,8İstismar yokEPSS %1

    commscope · ruckus c11021 Tem 2025

  • CVE-2024-23618
    39İzleyin

    Arris SURFboard SBG6950AC2 Arbitrary Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %1

    commscope · arris surfboard sbg6950ac2 firmware25 Oca 2024

  • CVE-2019-15806
    39İzleyin

    CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the administrative inter

    KritikCVSS 9,8İstismar yokEPSS %1

    commscope · tr4400 firmware29 Ağu 2019

  • CVE-2019-15805
    39İzleyin

    CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the administrative inter

    KritikCVSS 9,8İstismar yokEPSS %1

    commscope · tr4400 firmware29 Ağu 2019

  • CVE-2025-46120
    39İzleyin

    An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDirector prior to 10.5.

    KritikCVSS 9,8İstismar yokEPSS %1

    commscope · ruckus c11021 Tem 2025

  • CVE-2025-44954
    39İzleyin

    RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.

    KritikCVSS 9,8İstismar yokEPSS %1

    commscope · ruckus smartzone firmware4 Ağu 2025

  • CVE-2025-67305
    39İzleyin

    In RUCKUS Network Director (RND) < 4.5.0.56, the OVA appliance contains hardcoded SSH keys for the postgres user.

    KritikCVSS 9,8İstismar yokEPSS %1

    commscope · ruckus network director19 Şub 2026