İçeriğe atla
Noroxi

Arris kayıtları

arris üreticisine ait 28 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
3 · %10,7
Pre-auth RCE
7
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 20
  4. 22
  5. 23
  6. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

28 kayıt
  • CVE-2014-8423
    59Planlayın

    Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute arbitrary commands via

    KritikCVSS 10,0SilahlaştırılmışEPSS %62

    arris · vap2500 firmware28 Kas 2014

  • CVE-2014-8424
    49Planlayın

    ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication.

    YüksekCVSS 7,8SilahlaştırılmışEPSS %60

    arris · vap2500 firmware28 Kas 2014

  • CVE-2014-9406
    41Planlayın

    ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default password of password for the admin account,

    KritikCVSS 10,0İstismar yokEPSS %2

    arris · touchstone tg862g\/ct firmware18 Ara 2014

  • CVE-2022-26994
    40Planlayın

    Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerab

    KritikCVSS 9,8İstismar yokEPSS %3

    arris · sbr-ac1900p firmware15 Mar 2022

  • CVE-2022-26992
    40Planlayın

    Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerab

    KritikCVSS 9,8İstismar yokEPSS %3

    arris · sbr-ac1900p firmware15 Mar 2022

  • CVE-2022-26990
    40Planlayın

    Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerab

    KritikCVSS 9,8İstismar yokEPSS %3

    arris · sbr-ac1900p firmware15 Mar 2022

  • CVE-2022-26991
    40Planlayın

    Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerab

    KritikCVSS 9,8İstismar yokEPSS %3

    arris · sbr-ac1900p firmware15 Mar 2022

  • CVE-2022-26993
    40Planlayın

    Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerab

    KritikCVSS 9,8İstismar yokEPSS %3

    arris · sbr-ac1900p firmware15 Mar 2022

  • CVE-2018-20383
    40Planlayın

    ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0

    KritikCVSS 9,8İstismar yokEPSS %2

    arris · dg950s firmware23 Ara 2018

  • CVE-2023-40039
    39İzleyin

    An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices.

    KritikCVSS 9,8İstismar yokEPSS %1

    arris · tg852g firmware11 Eyl 2023

  • CVE-2015-7289
    38İzleyin

    Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 have a hardcoded administrator password de

    KritikCVSS 9,3İstismar yokEPSS %2

    arris · na model 862 gw mono firmware21 Kas 2015

  • CVE-2022-31793
    35İzleyin

    do_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single characte

    YüksekCVSS 7,5Kavram kanıtıEPSS %17

    inglorion · muhttpd4 Ağu 2022

  • CVE-2017-9490
    35İzleyin

    The Comcast firmware on Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices allows co

    YüksekCVSS 8,8İstismar yokEPSS %1

    arris · tg1682g firmware30 Tem 2017

  • CVE-2024-25729
    35İzleyin

    Arris SBG6580 devices have predictable default WPA2 security passwords that could lead to unauthorized remote access.

    YüksekCVSS 8,8İstismar yokEPSS %0

    7 Mar 2024

  • CVE-2023-40038
    35İzleyin

    Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access.

    YüksekCVSS 8,8İstismar yokEPSS %0

    arris · dg860a firmware27 Ara 2023

  • CVE-2014-8425
    32İzleyin

    The management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to obtain credentials by reading the configuration files.

    YüksekCVSS 7,8Kavram kanıtıEPSS %3

    arris · vap2500 firmware28 Kas 2014

  • CVE-2007-2796
    32İzleyin

    Arris Cadant C3 CMTS allows remote attackers to cause a denial of service (service termination) via a malformed IP packet with an invalid IP

    YüksekCVSS 7,8İstismar yokEPSS %2

    arris · cadant c3 cmts12 Haz 2007

  • CVE-2020-8438
    28İzleyin

    Ruckus ZoneFlex R500 104.0.0.0.1347 devices allow an authenticated attacker to execute arbitrary OS commands via the hidden /forms/nslookupH

    YüksekCVSS 7,2İstismar yokEPSS %2

    arris · ruckus zoneflex r500 firmware29 Oca 2020

  • CVE-2024-5195
    27İzleyin

    Arris VAP2500 diag_s.php command injection

    OrtaCVSS 5,1İstismar yokEPSS %23

    arris · vap2500 firmware22 May 2024

  • CVE-2024-5196
    27İzleyin

    Arris VAP2500 tools_command.php command injection

    OrtaCVSS 5,1İstismar yokEPSS %23

    arris · vap2500 firmware22 May 2024

  • CVE-2015-7291
    27İzleyin

    Cross-site request forgery (CSRF) vulnerability in adv_pwd_cgi in the web management interface on Arris DG860A, TG862A, and TG862G devices w

    OrtaCVSS 6,8İstismar yokEPSS %1

    arris · na model 862 gw mono firmware21 Kas 2015

  • CVE-2014-5437
    27İzleyin

    Multiple cross-site request forgery (CSRF) vulnerabilities in ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earl

    OrtaCVSS 6,8İstismar yokEPSS %1

    arris · touchstone tg862g\/ct firmware17 Ara 2014

  • CVE-2014-4863
    25İzleyin

    The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote attackers to obtain sens

    OrtaCVSS 5,0SilahlaştırılmışEPSS %16

    arris · touchstone dg950a software5 Eyl 2014

  • CVE-2022-45028
    24İzleyin

    A cross-site scripting (XSS) vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a craft

    OrtaCVSS 6,1İstismar yokEPSS %1

    arris · nvg443b firmware13 Ara 2022

  • CVE-2024-5194
    21İzleyin

    Arris VAP2500 assoc_table.php command injection

    OrtaCVSS 5,1İstismar yokEPSS %4

    arris · vap2500 firmware22 May 2024