Arris vulnerabilities
30 vulnerabilities
Known vulnerabilities in Arris products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 26 products.
Products
26- Vap25006 vulnerabilities
- Sbr Ac1200P5 vulnerabilities
- Sbr Ac1900P5 vulnerabilities
- Sbr Ac3200P5 vulnerabilities
- Na Model 862 Gw Mono4 vulnerabilities
- Touchstone Tg862G\/Ct3 vulnerabilities
- Vip11133 vulnerabilities
- Bgw2101 vulnerabilities
- Bgw3201 vulnerabilities
- Dg1670A1 vulnerabilities
- Dg860A1 vulnerabilities
- Dg950S1 vulnerabilities
- Nvg4431 vulnerabilities
- Nvg443B1 vulnerabilities
- Nvg5101 vulnerabilities
- Nvg5891 vulnerabilities
- Nvg5991 vulnerabilities
- Ruckus Zoneflex R5001 vulnerabilities
- Surfboard Sbg6950Ac21 vulnerabilities
- Tg1672G1 vulnerabilities
- Tg1682G1 vulnerabilities
- Tg852G1 vulnerabilities
- Tg862G1 vulnerabilities
- Touchstone Dg950A1 vulnerabilities
- Touchstone Dg950A Software1 vulnerabilities
- Cadant C3 Cmts0 vulnerabilities
CVE-2018-20383arrisdg950s_firmware+1
EPSS score1.82%
ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.CVE-2015-7290arrisna_model_862_gw_mono_firmwareEPSS score1.17%
Cross-site scripting (XSS) vulnerability in adv_pwd_cgi in the web management interface on Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 allows remote attackers to inject arbitrary web script or HTML via the pwd parameter.CVE-2015-7289arrisna_model_862_gw_mono_firmwareEPSS score2.06%
Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 have a hardcoded administrator password derived from a serial number, which makes it easier for remote attackers to obtain access via the web management interface, SSH, TELNET, or SNMP.CVE-2015-7291arrisna_model_862_gw_mono_firmwareEPSS score0.95%
Cross-site request forgery (CSRF) vulnerability in adv_pwd_cgi in the web management interface on Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 allows remote attackers to hijack the authentication of arbitrary users.CVE-2025-49164arrisvip1113EPSS score0.14%
Arris VIP1113 devices through 2025-05-30 with KreaTV SDK have a firmware decryption key of cd1c2d78f2cba1f73ca7e697b4a485f49a8a7d0c8b0fdc9f51ced50f2530668a.CVE-2025-49163arrisvip1113EPSS score0.16%
Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting an arbitrary image via a crafted /usr/bin/gunzip file.CVE-2025-49162arrisvip1113EPSS score0.19%
Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a remote filename with a space character allows an attacker to control the local filename.CVE-2020-8438arrisruckus_zoneflex_r500_firmwareEPSS score1.59%
Ruckus ZoneFlex R500 104.0.0.0.1347 devices allow an authenticated attacker to execute arbitrary OS commands via the hidden /forms/nslookupHandler form, as demonstrated by the nslookuptarget=|cat${IFS} substring.CVE-2014-9406arristouchstone_tg862g\/ct_firmwareEPSS score2.10%
ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default password of password for the admin account, which makes it easier for remote attackers to obtain access via a request to home_loggedout.php.CVE-2014-4863arristouchstone_dg950a+1EPSS score15.71%
The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote attackers to obtain sensitive password, key, and SSID information via an SNMP request.CVE-2014-5438arristouchstone_tg862g\/ct_firmwareEPSS score0.77%
Cross-site scripting (XSS) vulnerability in ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier allows remote authenticated users to inject arbitrary web script or HTML via the computer_name parameter to connected_devices_computers_edit.php.CVE-2014-5437arristouchstone_tg862g\/ct_firmwareEPSS score0.56%
Multiple cross-site request forgery (CSRF) vulnerabilities in ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) enable remote management via a request to remote_management.php, (2) add a port forwarding rule via a request to port_forwarding_add.php, (3) change the wireless network to open via a request to wireless_network_configuration_edit.php, or (4) conduct cross-site scripting (XSS) attacks via the keyword parameter to managed_sites_add_keyword.php.CVE-2014-8423arrisvap2500_firmwareEPSS score62.48%
Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute arbitrary commands via unknown vectors.CVE-2014-8425arrisvap2500_firmwareEPSS score3.14%
The management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to obtain credentials by reading the configuration files.CVE-2014-8424arrisvap2500_firmwareEPSS score59.62%
ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication.CVE-2022-26994arrissbr-ac1200p_firmware+2EPSS score2.96%
Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the pptp function via the pptpUserName and pptpPassword parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2022-26992arrissbr-ac1200p_firmware+2EPSS score2.91%
Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the ddns function via the DdnsUserName, DdnsHostName, and DdnsPassword parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2022-26993arrissbr-ac1200p_firmware+2EPSS score2.69%
Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the pppoe function via the pppoeUserName, pppoePassword, and pppoe_Service parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2022-26990arrissbr-ac1200p_firmware+2EPSS score2.87%
Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the firewall-local log function via the EmailAddress, SmtpServerName, SmtpUsername, and SmtpPassword parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2022-26991arrissbr-ac1200p_firmware+2EPSS score2.69%
Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the ntp function via the TimeZone parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.