Skip to content
Noroxi

Arris records

28 published records for vendor arris.

Researcher profile

Entered KEV
0 · 0%
Weaponized
3 · 10.7%
Pre-auth RCE
7
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 20
  4. 22
  5. 23
  6. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

28 records
  • CVE-2014-8423
    59Plan

    Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute arbitrary commands via

    CriticalCVSS 10.0WeaponizedEPSS 62%

    arris · vap2500 firmwareNov 28, 2014

  • CVE-2014-8424
    49Plan

    ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication.

    HighCVSS 7.8WeaponizedEPSS 59%

    arris · vap2500 firmwareNov 28, 2014

  • CVE-2014-9406
    41Plan

    ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default password of password for the admin account,

    CriticalCVSS 10.0No exploitEPSS 2%

    arris · touchstone tg862g\/ct firmwareDec 18, 2014

  • CVE-2014-4863
    40Plan

    The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote attackers to obtain sens

    MediumCVSS 5.0WeaponizedEPSS 15%

    arris · touchstone dg950a softwareSep 5, 2014

  • CVE-2022-26994
    40Plan

    Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerab

    CriticalCVSS 9.8No exploitEPSS 2%

    arris · sbr-ac1900p firmwareMar 15, 2022

  • CVE-2022-26992
    40Plan

    Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerab

    CriticalCVSS 9.8No exploitEPSS 2%

    arris · sbr-ac1900p firmwareMar 15, 2022

  • CVE-2022-26990
    40Plan

    Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerab

    CriticalCVSS 9.8No exploitEPSS 2%

    arris · sbr-ac1900p firmwareMar 15, 2022

  • CVE-2022-26993
    40Plan

    Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerab

    CriticalCVSS 9.8No exploitEPSS 2%

    arris · sbr-ac1900p firmwareMar 15, 2022

  • CVE-2022-26991
    40Plan

    Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerab

    CriticalCVSS 9.8No exploitEPSS 2%

    arris · sbr-ac1900p firmwareMar 15, 2022

  • CVE-2018-20383
    40Plan

    ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0

    CriticalCVSS 9.8No exploitEPSS 1%

    arris · dg950s firmwareDec 23, 2018

  • CVE-2023-40039
    39Monitor

    An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices.

    CriticalCVSS 9.8No exploitEPSS 1%

    arris · tg852g firmwareSep 11, 2023

  • CVE-2015-7289
    38Monitor

    Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 have a hardcoded administrator password de

    CriticalCVSS 9.3No exploitEPSS 2%

    arris · na model 862 gw mono firmwareNov 21, 2015

  • CVE-2022-31793
    35Monitor

    do_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single characte

    HighCVSS 7.5Proof of conceptEPSS 16%

    inglorion · muhttpdAug 4, 2022

  • CVE-2017-9490
    35Monitor

    The Comcast firmware on Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices allows co

    HighCVSS 8.8No exploitEPSS 0%

    arris · tg1682g firmwareJul 30, 2017

  • CVE-2024-25729
    35Monitor

    Arris SBG6580 devices have predictable default WPA2 security passwords that could lead to unauthorized remote access.

    HighCVSS 8.8No exploitEPSS 0%

    Mar 7, 2024

  • CVE-2023-40038
    35Monitor

    Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access.

    HighCVSS 8.8No exploitEPSS 0%

    arris · dg860a firmwareDec 27, 2023

  • CVE-2014-8425
    32Monitor

    The management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to obtain credentials by reading the configuration files.

    HighCVSS 7.8Proof of conceptEPSS 3%

    arris · vap2500 firmwareNov 28, 2014

  • CVE-2007-2796
    32Monitor

    Arris Cadant C3 CMTS allows remote attackers to cause a denial of service (service termination) via a malformed IP packet with an invalid IP

    HighCVSS 7.8No exploitEPSS 2%

    arris · cadant c3 cmtsJun 12, 2007

  • CVE-2020-8438
    28Monitor

    Ruckus ZoneFlex R500 104.0.0.0.1347 devices allow an authenticated attacker to execute arbitrary OS commands via the hidden /forms/nslookupH

    HighCVSS 7.2No exploitEPSS 1%

    arris · ruckus zoneflex r500 firmwareJan 29, 2020

  • CVE-2024-5195
    27Monitor

    Arris VAP2500 diag_s.php command injection

    MediumCVSS 5.1No exploitEPSS 23%

    arris · vap2500 firmwareMay 22, 2024

  • CVE-2024-5196
    27Monitor

    Arris VAP2500 tools_command.php command injection

    MediumCVSS 5.1No exploitEPSS 23%

    arris · vap2500 firmwareMay 22, 2024

  • CVE-2015-7291
    27Monitor

    Cross-site request forgery (CSRF) vulnerability in adv_pwd_cgi in the web management interface on Arris DG860A, TG862A, and TG862G devices w

    MediumCVSS 6.8No exploitEPSS 0%

    arris · na model 862 gw mono firmwareNov 21, 2015

  • CVE-2014-5437
    27Monitor

    Multiple cross-site request forgery (CSRF) vulnerabilities in ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earl

    MediumCVSS 6.8No exploitEPSS 0%

    arris · touchstone tg862g\/ct firmwareDec 17, 2014

  • CVE-2022-45028
    24Monitor

    A cross-site scripting (XSS) vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a craft

    MediumCVSS 6.1No exploitEPSS 0%

    arris · nvg443b firmwareDec 13, 2022

  • CVE-2024-5194
    21Monitor

    Arris VAP2500 assoc_table.php command injection

    MediumCVSS 5.1No exploitEPSS 3%

    arris · vap2500 firmwareMay 22, 2024